CVEvulnerability

CVE-2021-37791

4.9 MEDIUM Published 2022-06-30 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-06-30
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N

Description

MyAdmin v1.0 is affected by an incorrect access control vulnerability in viewing personal center in /api/user/userData?userCode=admin.

Affected configurations

• myadmin project myadmin 1.0

References

https://github.com/cdfan/my-admin/issues/3 Exploit, Issue Tracking, Third Party Advisory
https://github.com/cdfan/my-admin/issues/3 Exploit, Issue Tracking, Third Party Advisory