CVE-2021-36388

creationtimestamp| type| source ---|---|--- 2021-10-14 22:27:49+00:00| seen| https://t.me/cibsecurity/30596 2026-09-01 20:02:13+00:00| seen| https://t.me/hackingAttack/27658 2026-09-02 01:02:39+00:00| seen| https://t.me/hackingAttack/27658...

CVE-2021-36388

In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIIAvatarImage.i4"...