medium4.3
CVE-2021-3339
ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.
Impact
ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Modernflow | before 1.3.00.208 |
Weakness classification
References
- NVD record
- CVE.org record
- https://4sightwebsite.azurewebsites.net/mf_releaseNotes
- https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview
- https://4sightwebsite.azurewebsites.net/mf_releaseNotes
- https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview