CVE-2024-6425

Published: 2024-07-01T13:15Z

Last Modified: 2024-11-21T09:49Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUSER>&Password=<PASSWORD>&ConfirmPassword=<PASSWORD-REPEAT>". > MITRE Terms of Use apply – see LICENSE‑MITRE.txt