CVE-2021-41568
EUVD-2021-2858408.10.2021, 16:15
Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing bulletin boards and uploading files in the system.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tad_web_project | tad_web | 𝑥 ≤ 1.76 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-306 - Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.