What is GHSA-mg6c-xr2j-v4fv?

GHSA-mg6c-xr2j-v4fv is a security advisory published by GitHub Security Advisories with Critical severity. Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable...

Which CVE IDs does GHSA-mg6c-xr2j-v4fv cover?

GHSA-mg6c-xr2j-v4fv covers the following CVE IDs: CVE-2021-41716. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mg6c-xr2j-v4fv?

GHSA-mg6c-xr2j-v4fv has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-mg6c-xr2j-v4fvCriticalCVSS 9.8

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable...

Vendor

GitHub Security Advisories

Published

December 8, 2021

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2021-41716 →

📋 Description

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-41716
http://maharashtra.com
https://cvewalkthrough.com/cve-2021-41716-mahavitaran-android-application-account-take-over-via-otp-fixation
https://github.com/advisories/GHSA-mg6c-xr2j-v4fv