Security Advisory

CVE-2021-22957

8.8
HIGH

Vulnerability Description

A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect application Version 1.20.0 and later.
Published Date November 24, 2021
Official Source NIST NVD Advisory