CVE-2021-41564

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in.

Score

CVSS 3.1 6.5 Medium

Status

Modified - twcert@cert.org.tw

Published

2021-10-08

Last modified

2024-09-16

Weaknesses

CWE-285

Affected products

• Tad Honor (Tad)
• Tad Honor (Tad Honor Project)

References

• https://www.twcert.org.tw/tw/cp-132-5168-52304-1.html