CVE-2021-4461

Name of the Vulnerable Software and Affected Versions Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1

Description The software does not properly decode and parse the enc parameter in the thirdpartyController.do endpoint. The decoded map values can influence session attributes without sufficient authentication or authorization checks, allowing attackers to assign a session to arbitrary user IDs. This issue has been observed being exploited in the wild. The vulnerable endpoint is /thirdpartyController.do. The enc parameter is vulnerable.

Recommendations Versions prior to 7.0 SP1 should be used.