CVE-2021-45477mediumCWE-233

CVE-2021-45477: medium-severity vulnerability in Yordam Information Technologies Library…

IDOR in Yordam Library Automation System

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.6%
exploitation probability
0.6%top 52% of all CVEs
observed exploitation
nono source reports it
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Yordam Information Technologies · Library Automation System
Related CVEs — Yordam Information Technologies Library…

In the same product, most dangerous first.

CVE-2021-45478MEDIUMIDOR in Yordam Library Automation SystemEPSS 0.6%CVE-2021-45479MEDIUMXSS in Yordam Library Automation SystemEPSS 0.4%
References
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0119https://www.usom.gov.tr/bildirim/tr-23-0119