CVE-2021-27963

PoC —

CVSS 3.1

8.2 high

EPSS

2%p83

Published

Mar 5, 2021 (Mar 5, 2021)

Modified

Jun 17, 2026

Description

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.

Vendors: sfcyazilim
Products: sonlogger
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.