Approved changes feed: RSS · Atom
cpe:2.3:a:talkyard:talkyard:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Talkyard (b3cbec4c-d851-5738-ab5e-5335a5e525c0) |
|---|---|
| Product | Talkyard (7d0e101e-9e9e-5679-9a86-598d24c0a801) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/debiki/talkyard |
purl2cpe | 2026-06-01 10:12:23.196010 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-25981 |
vulnerable | 2026-06-08 05:30:41.825173 |
Talkyard - Insufficient Session Expiration
CRITICAL (9.8)
In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attacker is able to obtain that token (via other, hypothetical attacks)
Published: 2022-01-03T06:35:10.000Z
Updated: 2024-08-03T20:19:19.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25980 |
vulnerable | 2026-06-08 05:30:41.824553 |
Talkyard - Host-Header Injection Leads to Account Takeover
HIGH (8.8)
In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Host Header Injection. By luring a victim application-user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.
Published: 2021-11-11T07:10:11.000Z
Updated: 2025-04-30T15:46:56.474Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.