Vulnerabilities > CVE-2021-41608 - Authorization Bypass Through User-Controlled Key vulnerability in Classapps Selectsurvey.Net
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |