CVE-2021-37214 - CVE House
Back to Database
Status published High CVE-2021-37214

Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-3

Vulnerability Description

The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modify it, and then obtain administrator privilege and execute arbitrary command.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-37214

Credits & Attribution

No credits recorded in the NVD database.

References

More from Larvata Digital Technology Co. Ltd.

View All →
CVE-2021-37215
Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-4
Medium 4.3
CVE-2021-37213
Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2
Medium 4.3
CVE-2021-37212
Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-1
Medium 5.4
CVE-2021-37211
Larvata Digital Technology Co. Ltd. FLYGO - Stored XSS
Medium 5.4

Affected Vendor

Larvata Digital Technology Co. Ltd.

View all reports →

Affected Software

FLYGO
Vulnerable Versions:
unspecified

Timeline

Official Publish: August 9th, 2021
Last Modified: September 17th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-706

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.