CVE-2021-47754: Arunna

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users into submitting the form.

Affected products

• Arunna Arunna: version 1.0.0 only

Published 2026-01-15. Last modified 2026-06-17.