CVE-2021-42671

Published November 5th, 2021

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECTS

Description

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.

nu11secur1ty/CVE-mitre

https://cve.mitre.org/

GitHub

173

0xDeku/CVE-2021-42671

CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system.

GitHub