CVE-2021-41608

Katalog CVE

CVSS 7.5 · High EPSS 2,0%

Kerentanan Authorization Bypass Through User-Controlled Key pada classapps selectsurvey.net. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1.

Rincian

Terbit di NVD

28 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 79,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.classapps.com/product_ssv5.aspx product · advisory vendor
• https://www.optiv.com/insights/source-zero/blog/classapps-inc-selectsurveynet-v50-vulnerabilities-disclosure exploit · mitigasi · advisory pihak ketiga