/Vulnerability Library

AntD Admin - Sensitive Information Disclosure

CVE-2021-46371
Verified

Description

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user IDs, names, ages, phone numbers, addresses, and more.

Severity

High

CVSS Score

7.5

Exploit Probability

4%

Affected Product

antd-admin

Published Date

April 9, 2026

Template Author

ritikchaddha

CVE-2021-46371.yaml
7.5Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2021-46371
CWE ID:
cwe-306

References

https://github.com/zuiidea/antd-admin/issues/1127https://github.com/zuiidea/antd-adminhttps://nvd.nist.gov/vuln/detail/CVE-2021-46371

Remediation Steps

Update to the latest version of antd-admin that addresses access control issues.