Approved changes feed: RSS · Atom
cpe:2.3:a:mesbook:mesbook:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mesbook (1ed23354-a93a-53cb-94a0-2cf5ec094af5) |
|---|---|
| Product | Mesbook (a4ccde86-c421-55b9-b1e4-cb55283b1911) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6427 |
vulnerable | 2026-06-08 06:58:19.414285 |
Uncontrolled Resource Consumption vulnerability in MESbook
HIGH (7.5)
Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a payload with dangerous JavaScript code, causing the application to loop requests on itself, which could lead to resource consumption and disable the application.
Published: 2024-07-03T11:53:15.828Z
Updated: 2024-08-01T21:41:03.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6426 |
vulnerable | 2026-06-08 06:58:19.413508 |
Information exposure vulnerability vulnerability in MESbook
HIGH (8.1)
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
Published: 2024-07-03T11:51:58.125Z
Updated: 2024-08-01T21:41:03.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6425 |
vulnerable | 2026-06-08 06:58:19.413074 |
Incorrect Provision of Specified Functionality vulnerability in MESbook
CRITICAL (9.1)
Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUSER>&Password=<PASSWORD>&ConfirmPassword=<PASSWORD-REPEAT>".
Published: 2024-07-01T12:56:20.984Z
Updated: 2024-08-01T21:41:03.276Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6424 |
vulnerable | 2026-06-08 06:58:19.411333 |
Server-Side Request Forgery vulnerability in MESbook
CRITICAL (9.3)
External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST" or "/api/Proxy/Get?userName=&password=&uri=<ARCHIVO|URL INTERNA|IP/HOST" to read the source code of web files, read internal files or access network resources.
Published: 2024-07-01T12:54:20.749Z
Updated: 2024-08-01T21:41:03.308Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.