CVE-2021-22858

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions...

CVE-2021-22858

CVE-2021-22858 relates to ChanGate Enterprise Co., Ltd (CGE) property management system. The connected documents indicate a broken authentication/privilege-elevation flaw in the CGE account management function, enabling attackers to access the function without proper privileges and execute arbitr...