medium5.3
CVE-2021-30205
Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02.1_SC_UTF8 allows unauthenticated attackers to browse departments a…
Impact
Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02.1_SC_UTF8 allows unauthenticated attackers to browse departments and usernames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dzzoffice | Dzzoffice | Version 2.02.1 |