CVE-2021-22853
The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.
Date published : 2021-02-17
https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e