Filtered by vendor Luxsoft Subscriptions
Filtered by product Luxcal Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-45915 1 Luxsoft 1 Luxcal 2024-11-21 9.8 Critical
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.
CVE-2021-45914 1 Luxsoft 1 Luxcal 2024-11-21 9.8 Critical
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.