CVE-2021-27990 | BDVDB-2026-152144 Detail

Description#

Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/syedsohaibkarim/PoC-BrokenAuth-AppSpace6.2.4

Exploit#

No public exploit known

History#

Version 12021-04-14Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.