CVE-2021-4461

🗓️ 30 Oct 2025 21:16:23Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 12 Views🌐 WEB

Authentication bypass in Seeyon Zhiyuan OA System up to 7.0 SP1 via misdecoded enc in thirdpartyController.do.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-4461	30 Oct 202521:52	–	circl
CNNVD	Seeyon Zhiyuan OA Web Application System 安全漏洞	30 Oct 202500:00	–	cnnvd
Cvelist	CVE-2021-4461 Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass	30 Oct 202521:16	–	cvelist
EUVD	EUVD-2021-34712	31 Oct 202500:30	–	euvd
NVD	CVE-2021-4461	30 Oct 202522:15	–	nvd
Positive Technologies	PT-2025-44459	30 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2021-4461	31 Oct 202522:07	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2021-4461	30 Oct 202500:00	–	vulncheck_kev
Vulnrichment	CVE-2021-4461 Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass	30 Oct 202521:16	–	vulnrichment

Vulners

CNA

Node

seeyon zhiyuan_oa_web_application_systemRange0–7.0 sp1

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "thirdpartyController.do – `enc` parameter decoding (LightWeightEncoder) and parsing"
    ],
    "product": "Zhiyuan OA Web Application System",
    "vendor": "Seeyon",
    "versions": [
      {
        "lessThanOrEqual": "7.0 SP1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mp	www.mp.weixin.qq.com/s/0AqdfTrZUVrwTMbKEKresg
github	www.github.com/chaitin/xray/blob/f90cf321bc4d294bbf6625a9c4853f3bfdf0a384/pocs/seeyon-oa-cookie-leak.yml
vulncheck	www.vulncheck.com/advisories/seeyon-zhiyuan-oa-web-application-system-authentication-bypass
github	www.github.com/projectdiscovery/nuclei-templates/blob/1ca6b8e6fe225cbd46dcb893dcaee01447afa8c0/http/misconfiguration/seeyon-unauth.yaml

Parameter	Position	Path	Description	CWE
enc	query param	/thirdpartyController.do	Improper decode/parse of enc parameter allows session attribute manipulation and unauthorized user assignment.	CWE-306

15 Apr 2026 00:35Current

6.5Medium risk

Vulners AI Score6.5

CVSS 49.3

EPSS0.00118

SSVC