.. / CVE-2021-21745

• Auth Bypass
• Nuclei
• Web

Exploit for ZTE MF971R - Referer authentication bypass (CVE-2021-21745)

Description:

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.

Nuclei Template

View the template here CVE-2021-21745.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-21745.yaml

References: