CVE-2021-36388

creationtimestamp| type| source ---|---|--- 2021-10-14 22:27:49+00:00| seen| https://t.me/cibsecurity/30596...

CVE-2021-36388

In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIIAvatarImage.i4"...