CVE-2021-37213

The check-in record page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record...

CVE-2021-37213

The CVE-2021-37213 entry concerns Flygo, an attendance/clocking system by Larvata. Affected component: the check-in record page where an authenticated general user can exploit an insecure direct object reference (IDOR) by altering parameters (employee ID and date) to access other employees’ check...

CVE-2021-37213: Use of Incorrectly-Resolved Name or Reference

The check-in record page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record...

PT-2021-21578

Name of the Vulnerable Software and Affected Versions Flygo affected versions not specified Description The check-in record page of Flygo contains an Insecure Direct Object Reference IDOR issue. After being authenticated as a general user, remote attackers can manipulate the employee ID and date ...