Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-25985

In Factor (App Framework & Headless CMS) v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition, user sessions are stored in the browser’s local storage, which by default does not have an expiration time. This makes it possible for an attacker to steal and reuse the cookies using techniques such as XSS attacks, followed by a local account takeover.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.5
Products affected by CVE-2021-25985
  • Darwin » Factor » Version: 1.0.4
    cpe:2.3:a:darwin:factor:1.0.4
  • Darwin » Factor » Version: 1.0.5
    cpe:2.3:a:darwin:factor:1.0.5
  • Darwin » Factor » Version: 1.0.6
    cpe:2.3:a:darwin:factor:1.0.6
  • Darwin » Factor » Version: 1.0.7
    cpe:2.3:a:darwin:factor:1.0.7
  • Darwin » Factor » Version: 1.1.0
    cpe:2.3:a:darwin:factor:1.1.0
  • Darwin » Factor » Version: 1.1.1
    cpe:2.3:a:darwin:factor:1.1.1
  • Darwin » Factor » Version: 1.1.10
    cpe:2.3:a:darwin:factor:1.1.10
  • Darwin » Factor » Version: 1.1.11
    cpe:2.3:a:darwin:factor:1.1.11
  • Darwin » Factor » Version: 1.1.12
    cpe:2.3:a:darwin:factor:1.1.12
  • Darwin » Factor » Version: 1.1.13
    cpe:2.3:a:darwin:factor:1.1.13
  • Darwin » Factor » Version: 1.1.14
    cpe:2.3:a:darwin:factor:1.1.14
  • Darwin » Factor » Version: 1.1.15
    cpe:2.3:a:darwin:factor:1.1.15
  • Darwin » Factor » Version: 1.1.16
    cpe:2.3:a:darwin:factor:1.1.16
  • Darwin » Factor » Version: 1.1.17
    cpe:2.3:a:darwin:factor:1.1.17
  • Darwin » Factor » Version: 1.1.18
    cpe:2.3:a:darwin:factor:1.1.18
  • Darwin » Factor » Version: 1.1.19
    cpe:2.3:a:darwin:factor:1.1.19
  • Darwin » Factor » Version: 1.1.2
    cpe:2.3:a:darwin:factor:1.1.2
  • Darwin » Factor » Version: 1.1.20
    cpe:2.3:a:darwin:factor:1.1.20
  • Darwin » Factor » Version: 1.1.21
    cpe:2.3:a:darwin:factor:1.1.21
  • Darwin » Factor » Version: 1.1.22
    cpe:2.3:a:darwin:factor:1.1.22
  • Darwin » Factor » Version: 1.1.23
    cpe:2.3:a:darwin:factor:1.1.23
  • Darwin » Factor » Version: 1.1.24
    cpe:2.3:a:darwin:factor:1.1.24
  • Darwin » Factor » Version: 1.1.25
    cpe:2.3:a:darwin:factor:1.1.25
  • Darwin » Factor » Version: 1.1.26
    cpe:2.3:a:darwin:factor:1.1.26
  • Darwin » Factor » Version: 1.1.27
    cpe:2.3:a:darwin:factor:1.1.27
  • Darwin » Factor » Version: 1.1.28
    cpe:2.3:a:darwin:factor:1.1.28
  • Darwin » Factor » Version: 1.1.29
    cpe:2.3:a:darwin:factor:1.1.29
  • Darwin » Factor » Version: 1.1.3
    cpe:2.3:a:darwin:factor:1.1.3
  • Darwin » Factor » Version: 1.1.30
    cpe:2.3:a:darwin:factor:1.1.30
  • Darwin » Factor » Version: 1.1.31
    cpe:2.3:a:darwin:factor:1.1.31
  • Darwin » Factor » Version: 1.1.32
    cpe:2.3:a:darwin:factor:1.1.32
  • Darwin » Factor » Version: 1.1.33
    cpe:2.3:a:darwin:factor:1.1.33
  • Darwin » Factor » Version: 1.1.34
    cpe:2.3:a:darwin:factor:1.1.34
  • Darwin » Factor » Version: 1.1.35
    cpe:2.3:a:darwin:factor:1.1.35
  • Darwin » Factor » Version: 1.1.36
    cpe:2.3:a:darwin:factor:1.1.36
  • Darwin » Factor » Version: 1.1.37
    cpe:2.3:a:darwin:factor:1.1.37
  • Darwin » Factor » Version: 1.1.38
    cpe:2.3:a:darwin:factor:1.1.38
  • Darwin » Factor » Version: 1.1.39
    cpe:2.3:a:darwin:factor:1.1.39
  • Darwin » Factor » Version: 1.1.4
    cpe:2.3:a:darwin:factor:1.1.4
  • Darwin » Factor » Version: 1.1.40
    cpe:2.3:a:darwin:factor:1.1.40
  • Darwin » Factor » Version: 1.1.41
    cpe:2.3:a:darwin:factor:1.1.41
  • Darwin » Factor » Version: 1.1.42
    cpe:2.3:a:darwin:factor:1.1.42
  • Darwin » Factor » Version: 1.1.5
    cpe:2.3:a:darwin:factor:1.1.5
  • Darwin » Factor » Version: 1.1.6
    cpe:2.3:a:darwin:factor:1.1.6
  • Darwin » Factor » Version: 1.1.7
    cpe:2.3:a:darwin:factor:1.1.7
  • Darwin » Factor » Version: 1.1.8
    cpe:2.3:a:darwin:factor:1.1.8
  • Darwin » Factor » Version: 1.1.9
    cpe:2.3:a:darwin:factor:1.1.9
  • Darwin » Factor » Version: 1.2.0
    cpe:2.3:a:darwin:factor:1.2.0
  • Darwin » Factor » Version: 1.2.1
    cpe:2.3:a:darwin:factor:1.2.1
  • Darwin » Factor » Version: 1.2.10
    cpe:2.3:a:darwin:factor:1.2.10
  • Darwin » Factor » Version: 1.2.2
    cpe:2.3:a:darwin:factor:1.2.2
  • Darwin » Factor » Version: 1.2.3
    cpe:2.3:a:darwin:factor:1.2.3
  • Darwin » Factor » Version: 1.2.4
    cpe:2.3:a:darwin:factor:1.2.4
  • Darwin » Factor » Version: 1.2.5
    cpe:2.3:a:darwin:factor:1.2.5
  • Darwin » Factor » Version: 1.2.6
    cpe:2.3:a:darwin:factor:1.2.6
  • Darwin » Factor » Version: 1.2.7
    cpe:2.3:a:darwin:factor:1.2.7
  • Darwin » Factor » Version: 1.2.8
    cpe:2.3:a:darwin:factor:1.2.8
  • Darwin » Factor » Version: 1.2.9
    cpe:2.3:a:darwin:factor:1.2.9
  • Darwin » Factor » Version: 1.3.0
    cpe:2.3:a:darwin:factor:1.3.0
  • Darwin » Factor » Version: 1.3.1
    cpe:2.3:a:darwin:factor:1.3.1
  • Darwin » Factor » Version: 1.3.10
    cpe:2.3:a:darwin:factor:1.3.10
  • Darwin » Factor » Version: 1.3.11
    cpe:2.3:a:darwin:factor:1.3.11
  • Darwin » Factor » Version: 1.3.12
    cpe:2.3:a:darwin:factor:1.3.12
  • Darwin » Factor » Version: 1.3.2
    cpe:2.3:a:darwin:factor:1.3.2
  • Darwin » Factor » Version: 1.3.3
    cpe:2.3:a:darwin:factor:1.3.3
  • Darwin » Factor » Version: 1.3.4
    cpe:2.3:a:darwin:factor:1.3.4
  • Darwin » Factor » Version: 1.3.5
    cpe:2.3:a:darwin:factor:1.3.5
  • Darwin » Factor » Version: 1.3.6
    cpe:2.3:a:darwin:factor:1.3.6
  • Darwin » Factor » Version: 1.3.7
    cpe:2.3:a:darwin:factor:1.3.7
  • Darwin » Factor » Version: 1.3.8
    cpe:2.3:a:darwin:factor:1.3.8
  • Darwin » Factor » Version: 1.3.9
    cpe:2.3:a:darwin:factor:1.3.9
  • Darwin » Factor » Version: 1.4.0
    cpe:2.3:a:darwin:factor:1.4.0
  • Darwin » Factor » Version: 1.4.1
    cpe:2.3:a:darwin:factor:1.4.1
  • Darwin » Factor » Version: 1.4.10
    cpe:2.3:a:darwin:factor:1.4.10
  • Darwin » Factor » Version: 1.4.11
    cpe:2.3:a:darwin:factor:1.4.11
  • Darwin » Factor » Version: 1.4.2
    cpe:2.3:a:darwin:factor:1.4.2
  • Darwin » Factor » Version: 1.4.3
    cpe:2.3:a:darwin:factor:1.4.3
  • Darwin » Factor » Version: 1.4.4
    cpe:2.3:a:darwin:factor:1.4.4
  • Darwin » Factor » Version: 1.4.5
    cpe:2.3:a:darwin:factor:1.4.5
  • Darwin » Factor » Version: 1.4.6
    cpe:2.3:a:darwin:factor:1.4.6
  • Darwin » Factor » Version: 1.4.7
    cpe:2.3:a:darwin:factor:1.4.7
  • Darwin » Factor » Version: 1.4.8
    cpe:2.3:a:darwin:factor:1.4.8
  • Darwin » Factor » Version: 1.4.9
    cpe:2.3:a:darwin:factor:1.4.9
  • Darwin » Factor » Version: 1.5.0
    cpe:2.3:a:darwin:factor:1.5.0
  • Darwin » Factor » Version: 1.5.1
    cpe:2.3:a:darwin:factor:1.5.1
  • Darwin » Factor » Version: 1.5.10
    cpe:2.3:a:darwin:factor:1.5.10
  • Darwin » Factor » Version: 1.5.11
    cpe:2.3:a:darwin:factor:1.5.11
  • Darwin » Factor » Version: 1.5.12
    cpe:2.3:a:darwin:factor:1.5.12
  • Darwin » Factor » Version: 1.5.13
    cpe:2.3:a:darwin:factor:1.5.13
  • Darwin » Factor » Version: 1.5.14
    cpe:2.3:a:darwin:factor:1.5.14
  • Darwin » Factor » Version: 1.5.15
    cpe:2.3:a:darwin:factor:1.5.15
  • Darwin » Factor » Version: 1.5.16
    cpe:2.3:a:darwin:factor:1.5.16
  • Darwin » Factor » Version: 1.5.17
    cpe:2.3:a:darwin:factor:1.5.17
  • Darwin » Factor » Version: 1.5.18
    cpe:2.3:a:darwin:factor:1.5.18
  • Darwin » Factor » Version: 1.5.19
    cpe:2.3:a:darwin:factor:1.5.19
  • Darwin » Factor » Version: 1.5.2
    cpe:2.3:a:darwin:factor:1.5.2
  • Darwin » Factor » Version: 1.5.20
    cpe:2.3:a:darwin:factor:1.5.20
  • Darwin » Factor » Version: 1.5.21
    cpe:2.3:a:darwin:factor:1.5.21
  • Darwin » Factor » Version: 1.5.22
    cpe:2.3:a:darwin:factor:1.5.22
  • Darwin » Factor » Version: 1.5.23
    cpe:2.3:a:darwin:factor:1.5.23
  • Darwin » Factor » Version: 1.5.24
    cpe:2.3:a:darwin:factor:1.5.24
  • Darwin » Factor » Version: 1.5.25
    cpe:2.3:a:darwin:factor:1.5.25
  • Darwin » Factor » Version: 1.5.26
    cpe:2.3:a:darwin:factor:1.5.26
  • Darwin » Factor » Version: 1.5.27
    cpe:2.3:a:darwin:factor:1.5.27
  • Darwin » Factor » Version: 1.5.28
    cpe:2.3:a:darwin:factor:1.5.28
  • Darwin » Factor » Version: 1.5.29
    cpe:2.3:a:darwin:factor:1.5.29
  • Darwin » Factor » Version: 1.5.3
    cpe:2.3:a:darwin:factor:1.5.3
  • Darwin » Factor » Version: 1.5.30
    cpe:2.3:a:darwin:factor:1.5.30
  • Darwin » Factor » Version: 1.5.4
    cpe:2.3:a:darwin:factor:1.5.4
  • Darwin » Factor » Version: 1.5.5
    cpe:2.3:a:darwin:factor:1.5.5
  • Darwin » Factor » Version: 1.5.6
    cpe:2.3:a:darwin:factor:1.5.6
  • Darwin » Factor » Version: 1.5.7
    cpe:2.3:a:darwin:factor:1.5.7
  • Darwin » Factor » Version: 1.5.8
    cpe:2.3:a:darwin:factor:1.5.8
  • Darwin » Factor » Version: 1.5.9
    cpe:2.3:a:darwin:factor:1.5.9
  • Darwin » Factor » Version: 1.6.0
    cpe:2.3:a:darwin:factor:1.6.0
  • Darwin » Factor » Version: 1.6.1
    cpe:2.3:a:darwin:factor:1.6.1
  • Darwin » Factor » Version: 1.6.2
    cpe:2.3:a:darwin:factor:1.6.2
  • Darwin » Factor » Version: 1.6.3
    cpe:2.3:a:darwin:factor:1.6.3
  • Darwin » Factor » Version: 1.7.0
    cpe:2.3:a:darwin:factor:1.7.0
  • Darwin » Factor » Version: 1.7.1
    cpe:2.3:a:darwin:factor:1.7.1
  • Darwin » Factor » Version: 1.7.10
    cpe:2.3:a:darwin:factor:1.7.10
  • Darwin » Factor » Version: 1.7.2
    cpe:2.3:a:darwin:factor:1.7.2
  • Darwin » Factor » Version: 1.7.3
    cpe:2.3:a:darwin:factor:1.7.3
  • Darwin » Factor » Version: 1.7.4
    cpe:2.3:a:darwin:factor:1.7.4
  • Darwin » Factor » Version: 1.7.5
    cpe:2.3:a:darwin:factor:1.7.5
  • Darwin » Factor » Version: 1.7.6
    cpe:2.3:a:darwin:factor:1.7.6
  • Darwin » Factor » Version: 1.7.7
    cpe:2.3:a:darwin:factor:1.7.7
  • Darwin » Factor » Version: 1.7.8
    cpe:2.3:a:darwin:factor:1.7.8
  • Darwin » Factor » Version: 1.7.9
    cpe:2.3:a:darwin:factor:1.7.9
  • Darwin » Factor » Version: 1.8.0
    cpe:2.3:a:darwin:factor:1.8.0
  • Darwin » Factor » Version: 1.8.1
    cpe:2.3:a:darwin:factor:1.8.1
  • Darwin » Factor » Version: 1.8.10
    cpe:2.3:a:darwin:factor:1.8.10
  • Darwin » Factor » Version: 1.8.11
    cpe:2.3:a:darwin:factor:1.8.11
  • Darwin » Factor » Version: 1.8.12
    cpe:2.3:a:darwin:factor:1.8.12
  • Darwin » Factor » Version: 1.8.13
    cpe:2.3:a:darwin:factor:1.8.13
  • Darwin » Factor » Version: 1.8.14
    cpe:2.3:a:darwin:factor:1.8.14
  • Darwin » Factor » Version: 1.8.15
    cpe:2.3:a:darwin:factor:1.8.15
  • Darwin » Factor » Version: 1.8.16
    cpe:2.3:a:darwin:factor:1.8.16
  • Darwin » Factor » Version: 1.8.17
    cpe:2.3:a:darwin:factor:1.8.17
  • Darwin » Factor » Version: 1.8.18
    cpe:2.3:a:darwin:factor:1.8.18
  • Darwin » Factor » Version: 1.8.19
    cpe:2.3:a:darwin:factor:1.8.19
  • Darwin » Factor » Version: 1.8.2
    cpe:2.3:a:darwin:factor:1.8.2
  • Darwin » Factor » Version: 1.8.20
    cpe:2.3:a:darwin:factor:1.8.20
  • Darwin » Factor » Version: 1.8.21
    cpe:2.3:a:darwin:factor:1.8.21
  • Darwin » Factor » Version: 1.8.22
    cpe:2.3:a:darwin:factor:1.8.22
  • Darwin » Factor » Version: 1.8.23
    cpe:2.3:a:darwin:factor:1.8.23
  • Darwin » Factor » Version: 1.8.24
    cpe:2.3:a:darwin:factor:1.8.24
  • Darwin » Factor » Version: 1.8.25
    cpe:2.3:a:darwin:factor:1.8.25
  • Darwin » Factor » Version: 1.8.26
    cpe:2.3:a:darwin:factor:1.8.26
  • Darwin » Factor » Version: 1.8.27
    cpe:2.3:a:darwin:factor:1.8.27
  • Darwin » Factor » Version: 1.8.28
    cpe:2.3:a:darwin:factor:1.8.28
  • Darwin » Factor » Version: 1.8.29
    cpe:2.3:a:darwin:factor:1.8.29
  • Darwin » Factor » Version: 1.8.3
    cpe:2.3:a:darwin:factor:1.8.3
  • Darwin » Factor » Version: 1.8.30
    cpe:2.3:a:darwin:factor:1.8.30
  • Darwin » Factor » Version: 1.8.4
    cpe:2.3:a:darwin:factor:1.8.4
  • Darwin » Factor » Version: 1.8.5
    cpe:2.3:a:darwin:factor:1.8.5
  • Darwin » Factor » Version: 1.8.6
    cpe:2.3:a:darwin:factor:1.8.6
  • Darwin » Factor » Version: 1.8.7
    cpe:2.3:a:darwin:factor:1.8.7
  • Darwin » Factor » Version: 1.8.8
    cpe:2.3:a:darwin:factor:1.8.8
  • Darwin » Factor » Version: 1.8.9
    cpe:2.3:a:darwin:factor:1.8.9


Contact Us

Shodan ® - All rights reserved