CVE-2021-21823

High

An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11. A specially…

talos·CWE-359·Published 2021-08-20

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

227 chars

An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11. A specially crafted series of network requests can lead to the disclosure of sensitive information.

NVDen

227 chars

NVDes

258 chars

Se presenta una vulnerabilidad de divulgación de información en la funcionalidad Friend finder de GmbH Komoot versión 10.26.9 hasta 11.1.11. Una serie de peticiones de red especialmente diseñadas puede conllevar a una divulgación de información confidencial.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	cve.org	5.3	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.0	Primary	cve.org	5.3	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.0	Secondary	NVD	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N