CVE-2021-27963
05.03.2021, 02:15
SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sfcyazilim | sonlogger | 𝑥 < 6.4.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration