CVE-2021-41568

MEDIUM

Tad Web < 1.76 - Unauthenticated Authorization Bypass

Title source: llm

Description

Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing bulletin boards and uploading files in the system.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://www.twcert.org.tw/tw/cp-132-5172-b012c-1.html

Scores

CVSS v3 5.3

EPSS 0.0099

EPSS Percentile 58.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-285 CWE-306

Status published

Products (1)

tad_web_project/tad_web < 1.76

Published Oct 08, 2021

Tracked Since Feb 18, 2026