Skip to content
OpenAdvisories
Unscored CVE-2021-30205 EUVD-2021-17137GHSA-f8j8-g2f7-722j

Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02.1_SC_UTF8 allows unauthenticated attackers to …

Published Jun 27, 2023 · Updated Dec 5, 2024 · Assigned by mitre

Description

Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02.1_SC_UTF8 allows unauthenticated attackers to browse departments and usernames.

References