Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-p8uz-n8jm-jbgr
Vulnerability ID VCID-p8uz-n8jm-jbgr
Aliases CVE-2021-41273
GHSA-wwgq-9jhf-qgw6
Summary Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00117 https://api.first.org/data/v1/epss?cve=CVE-2021-41273
epss 0.00117 https://api.first.org/data/v1/epss?cve=CVE-2021-41273
epss 0.00117 https://api.first.org/data/v1/epss?cve=CVE-2021-41273
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-wwgq-9jhf-qgw6
cvssv3.1 4.3 https://github.com/pterodactyl/panel
generic_textual MODERATE https://github.com/pterodactyl/panel
cvssv3.1 4.3 https://github.com/pterodactyl/panel/commit/bf9cbe2c6d5266c6914223e067c56175de7fc3a5
generic_textual MODERATE https://github.com/pterodactyl/panel/commit/bf9cbe2c6d5266c6914223e067c56175de7fc3a5
cvssv3.1 4.3 https://github.com/pterodactyl/panel/security/advisories/GHSA-wwgq-9jhf-qgw6
cvssv3.1_qr MODERATE https://github.com/pterodactyl/panel/security/advisories/GHSA-wwgq-9jhf-qgw6
generic_textual MODERATE https://github.com/pterodactyl/panel/security/advisories/GHSA-wwgq-9jhf-qgw6
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2021-41273
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2021-41273
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-41273
https://github.com/pterodactyl/panel
https://github.com/pterodactyl/panel/commit/bf9cbe2c6d5266c6914223e067c56175de7fc3a5
CVE-2021-41273 https://nvd.nist.gov/vuln/detail/CVE-2021-41273
GHSA-wwgq-9jhf-qgw6 https://github.com/advisories/GHSA-wwgq-9jhf-qgw6
GHSA-wwgq-9jhf-qgw6 https://github.com/pterodactyl/panel/security/advisories/GHSA-wwgq-9jhf-qgw6
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/pterodactyl/panel
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/pterodactyl/panel/commit/bf9cbe2c6d5266c6914223e067c56175de7fc3a5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://github.com/pterodactyl/panel/security/advisories/GHSA-wwgq-9jhf-qgw6
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2021-41273
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.30124
EPSS Score 0.00117
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:27:09.745767+00:00 GHSA Importer Import https://github.com/advisories/GHSA-wwgq-9jhf-qgw6 38.6.0