CVE-2021-37213

Summary

The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record.

Affected Software

VendorProductVersion RangeStatus
Larvata Digital Technology Co. Ltd.FLYGOunspecified <= 2021.4eaffected

Weaknesses

  • CWE-706: CWE-706 Use of Incorrectly-Resolved Name or Reference

ADP Enrichment

CVE Program Container

Additional References

References