AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-29487

HIGH · CVSS 7.4 EPSS 0.90% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-08-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2021-29487
Severity
HIGH
CVSS
7.4
EPSS
0.90%

Original NVD Description

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can exploit this vulnerability to bypass authentication and takeover of and user account on an October CMS server. The vulnerability is exploitable by unauthenticated users via a specially crafted request. This only affects frontend users and the attacker must obtain a Laravel secret key for cookie encryption and signing in order to exploit this vulnerability. The issue has been patched in Build 472 and v1.1.5.