What’s Vulnerable › Vulnerabilities

CVE-2021-21403: Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-26 · updated 2026-06-17
• Weakness: CWE-305

Description

In github.com/kongchuanhujiao/server before version 1.3.21 there is an authentication Bypass by Primary Weakness vulnerability. All users are impacted. This is fixed in version 1.3.21.

Affected products

• Kongchuanhujiao Project Kongchuanhujiao: before 1.3.21 — fixed in 1.3.21

How to fix

Upgrade to a fixed version: Kongchuanhujiao Project Kongchuanhujiao 1.3.21. Check the vendor advisory for mitigations.

References

• https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1
• https://github.com/kongchuanhujiao/server/security/advisories/GHSA-8wrg-m8vm-5fvj
• https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1
• https://github.com/kongchuanhujiao/server/security/advisories/GHSA-8wrg-m8vm-5fvj

Get alerted when CVE-2021-21403 or the next vulnerability affects your stack