CVE-2021-46252: Scratch-Wiki Scratch Confirmaccount v3

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses.

Affected products

• Scratch-Wiki Scratch Confirmaccount v3: before 2022-01-04 (fixed in 2022-01-04)

Published 2022-02-15. Last modified 2026-06-17.