Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9wmc-pstb-ykfq
Vulnerability ID VCID-9wmc-pstb-ykfq
Aliases CVE-2021-41824
GHSA-h7vq-5qgw-jwwq
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1236 Improper Neutralization of Formula Elements in a CSV File
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.0051 https://api.first.org/data/v1/epss?cve=CVE-2021-41824
epss 0.0051 https://api.first.org/data/v1/epss?cve=CVE-2021-41824
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-h7vq-5qgw-jwwq
cvssv3.1 8.8 https://github.com/craftcms/cms
generic_textual HIGH https://github.com/craftcms/cms
cvssv3.1 8.8 https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
generic_textual HIGH https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
cvssv3.1 8.8 https://github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2
generic_textual HIGH https://github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2
cvssv3.1 8.8 https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
cvssv3.1_qr HIGH https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
generic_textual HIGH https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2021-41824
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2021-41824
cvssv3.1 8.8 https://twitter.com/craftcmsupdates/status/1442928690145366018
generic_textual HIGH https://twitter.com/craftcmsupdates/status/1442928690145366018
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-41824
https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
https://github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2
https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
https://nvd.nist.gov/vuln/detail/CVE-2021-41824
https://twitter.com/craftcmsupdates/status/1442928690145366018
GHSA-h7vq-5qgw-jwwq https://github.com/advisories/GHSA-h7vq-5qgw-jwwq
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/craftcms/cms
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2021-41824
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://twitter.com/craftcmsupdates/status/1442928690145366018
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.66847
EPSS Score 0.0051
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T02:03:12.867391+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0