Vulnerabilities

TI-2021-15276 CVE-2021-37215 · GHSA-f423-79c7-g4mq

Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-4

LOW 21

The employee management page of Flygo contains an Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00677 Published 2021-08-09 No fix listed CWE-706

TI-2021-15275 CVE-2021-37214 · GHSA-4f5g-544m-849j

MEDIUM 40

The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01064 Published 2021-08-09 No fix listed CWE-706

TI-2021-15274 CVE-2021-37213 · GHSA-8r96-j25h-hj4g

LOW 21

The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00764 Published 2021-08-09 No fix listed CWE-706

TI-2021-15273 CVE-2021-37212 · GHSA-hqfm-f44v-gmx6

LOW 25

The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00641 Published 2021-08-09 No fix listed CWE-706

TI-2021-15272 CVE-2021-37211 · GHSA-wgqq-h84j-p8mg

LOW 25

The bulletin function of Flygo does not filter special characters while a new announcement is added.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00456 Published 2021-08-09 No fix listed CWE-79