CVE-2021-29995: Cloverdx

High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days.

A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the logged-in user (including script execution). The issue is resolved in CloverDX 5.10, CloverDX 5.9.1, CloverDX 5.8.2, and CloverDX 5.7.1.

Affected products

• Cloverdx Cloverdx: before 5.7.1 (fixed in 5.7.1); from 5.8.0, before 5.8.2 (fixed in 5.8.2); from 5.9.0, before 5.9.1 (fixed in 5.9.1)

Published 2021-06-09. Last modified 2026-06-17.