Security Advisory

CVE-2021-37212

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-09 09:15:26

Last updated 2024-09-17 02:06:03

Assigner twcert

State PUBLISHED

Description

The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the bulletin ID in specific Url parameters and access and modify bulletin particular content.

← Browse all CVEs View on cve.org ↗