← CVE Intelligence

CVE-2024-6425

Incorrect Provision of Specified Functionality vulnerability in MESbook PUBLISHED

Description (CNA)

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUSER>&Password=<PASSWORD>&ConfirmPassword=<PASSWORD-REPEAT>".

Affected (CNA)

Vendor / productVersions
MESbook / MESbookaffected 20221021.03

CWE

CWE-684

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.