CVEvulnerability

CVE-2021-41568

6.5 MEDIUM Published 2021-10-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-10-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-285, CWE-306

Description

Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing bulletin boards and uploading files in the system.

Affected configurations

• tad web project tad web (<= 1.76)

Related

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References