Lucene search
+L

3 matches found

OSV
OSV
added 2022/03/18 6:15 p.m.6 views

CVE-2021-4031

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

7.5CVSS5.8AI score0.00475EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/18 5:59 p.m.28 views

CVE-2021-4031 Syltek Insufficient Verification of Data Authenticity

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

7.5CVSS7.7AI score0.00475EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/18 5:59 p.m.83 views

CVE-2021-4031

CVE-2021-4031 affects the Syltek application prior to version 10.22.00. The root cause is insufficient verification of a product’s payment data, allowing a forged request to mark items as paid without proper authentication. Impact is payment system bypass with high integrity-risk (CVE metrics: CV...

7.5CVSS7.5AI score0.00475EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder