critical9.1
CVE-2024-6425
Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version.
Impact
Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUSER>&Password=<PASSWORD>&ConfirmPassword=<PASSWORD-REPEAT>".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mesbook | Mesbook | Version 20221021.03 |