CVE-2021-27963

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin)

published March 5, 2021

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02446 · 84.3th percentile
Published
2021-03-05T01:37Z
EPSS history
Timeline
  • 05 MAR 01:37Z
    SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin)
    cvelistv5