← Database

CVE-2024-6425

CRITICAL CVSS: 9.1 Published: 2024-07-01 Modified: 2026-06-17

Description

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=&Password=&ConfirmPassword=".

Affected Platforms

Mesbook Mesbook

Weakness Type

CWE-684

References