MESbook vulnerabilities
We track 4 vulnerabilities in MESbook products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2024.
Latest MESbook vulnerabilities
- 7.5 High severity
MESbook: Allocation of Resources Without Limits or Throttling
Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a payload with dangerous JavaScript code, causing the application to loop requests on itself, which cou
- 7.1 High severity
MESbook: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
- 9.1 Critical severity
MESbook: Incorrect Provision of Specified Functionality
Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUS
- 8.2 High severity
MESbook: Server-Side Request Forgery
External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST" or "/api/Proxy/Get?userName=&password=&