{"vulnerability": "CVE-2021-4294", "sightings": [{"uuid": "74893a0b-b75e-410e-827c-2bc43e69ac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4294", "type": "seen", "source": "https://t.me/cibsecurity/55500", "content": "\u203c CVE-2021-4294 \u203c\n\nA vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 8612686d6dda34ae9ef6b5a974e4b7accb4fea29. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216987.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T20:12:27.000000Z"}, {"uuid": "d84fe84a-bfab-430b-8806-e46c32f1e7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42949", "type": "seen", "source": "https://t.me/cibsecurity/49916", "content": "\u203c CVE-2021-42949 \u203c\n\nThe component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T18:28:56.000000Z"}, {"uuid": "0968bcd2-c838-4c16-bd11-520a75eff80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42948", "type": "seen", "source": "https://t.me/cibsecurity/49931", "content": "\u203c CVE-2021-42948 \u203c\n\nHotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T20:28:59.000000Z"}, {"uuid": "da422014-45e7-4c31-91f0-4e0ef86e5513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42946", "type": "seen", "source": "https://t.me/cibsecurity/39936", "content": "\u203c CVE-2021-42946 \u203c\n\nA Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-31T22:22:01.000000Z"}]}