CVE-2021-41568 MEDIUM

CVE-2021-41568: Tad Web - Improper Authorization

Vendor Tad

Product Tad Web

Weakness CWE-285

Published October 8, 2021

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing bulletin boards and uploading files in the system.

Key dates

02Disclosure timeline

October 8, 2021 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-41568 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

04Related CVE

CVE-2023-48309 next-auth vulnerable to possible user mocking that bypasses basic authentication CVE-2025-11510 FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset CVE-2025-12505 weDocs <= 2.1.14 - Missing Authorization to Settings Update CVE-2025-9294 Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion CVE-2025-29778 Kyverno ignores subjectRegExp and IssuerRegExp