2 matches found
CVE-2021-27963
SonLogger before 6.4.1 is affected by user creation with any user permissions profile e.g., SuperAdmin. An anonymous user can send a POST request to /User/saveUser without any authentication or session header...
8.2CVSS7.2AI score0.02446EPSS
SaveExploits2References1
20