0xDeku/CVE-2021-42671

0xDeku/CVE-2021-42671

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-42671↗
7.5 HIGH5 MEDIUM

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.