Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-6424

Server-Side Request Forgery vulnerability in MESbook

External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST" or "/api/Proxy/Get?userName=&password=&uri=<ARCHIVO|URL INTERNA|IP/HOST" to read the source code of web files, read internal files or access network resources.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Mesbook
Products
Mesbook
CVE-2024-6425

Incorrect Provision of Specified Functionality vulnerability in MESbook

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUSER>&Password=<PASSWORD>&ConfirmPassword=<PASSWORD-REPEAT>".

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Mesbook
Products
Mesbook
CVE-2024-6427

Uncontrolled Resource Consumption vulnerability in MESbook

Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a payload with dangerous JavaScript code, causing the application to loop requests on itself, which could lead to resource consumption and disable the application.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mesbook
Products
Mesbook
CVE-2024-6426

Information exposure vulnerability vulnerability in MESbook

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Mesbook
Products
Mesbook