CVE-2021-27990

CVE-2021-27990 affects Appspace 6.2.4. The issue is a broken authentication mechanism that allows direct access to pages (e.g., /medianet/mail.aspx), resulting in exposure of the framework’s layouts, menus and functionalities. Public sources in the connected documents corroborate an authorization...