CVE-2021-27963

creationtimestamp| type| source ---|---|--- 2021-03-05 07:47:10+00:00| seen| https://t.me/cibsecurity/24496 2021-12-12 18:31:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2858...

CVE-2021-27963

SonLogger before 6.4.1 is affected by user creation with any user permissions profile e.g., SuperAdmin. An anonymous user can send a POST request to /User/saveUser without any authentication or session header...