The check-in record page of Flygo... CVE-2021-37213

4.0 AV AC AU C I A
发布: 2021-08-09
修订: 2024-11-21

The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息