CVE-2021-33831

api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
th-wildaucovid-19_contact_tracing
𝑥
≤ 2021-09-01
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/lanmarc77/CVE-2021-33831
https://www.th-wildau.de/studieren-weiterbilden/neuigkeiten-und-veranstaltungen/corona/
https://github.com/lanmarc77/CVE-2021-33831
https://www.th-wildau.de/studieren-weiterbilden/neuigkeiten-und-veranstaltungen/corona/