Lucene search
China National Vulnerability DatabaseCNVD-2021-103083HistoryDec 12, 2021 - 12:00 a.m.
Belloo Permissions and Access Control Issues Vulnerability
2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
belloo
dating software
vulnerability
permission control
access control
weak password reset
authentication bypass
account takeover
EPSS
0.001
Percentile
24.8%
Belloo, a “high quality” dating software from Belloo, is vulnerable to permission and access control issues due to a weak password reset mechanism in requestsuser.php, which could be exploited to bypass authentication vulnerabilities and take over an account.
Related
prion
prion
Authentication flaw
2021-12-09 16:15:00
nvd
nvd
CVE-2021-41696
2021-12-09 16:15:08
cvelist
cvelist
CVE-2021-41696
2021-12-09 15:33:49
cve
cve
CVE-2021-41696
2021-12-09 16:15:08