high8.2
CVE-2021-27963
SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin).
Impact
SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sfcyazilim | Sonlogger | before 6.4.1 |