Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-41564 EUVD-2021-28580GHSA-37jg-qm7m-782r

Tad Honor - Improper Authorization

Published Oct 8, 2021 · Updated Sep 16, 2024 · Assigned by twcert

Description

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in.

Affected products

VendorProductAffectedFixed
Tad Tad Honor ≤ 1.46 —

References