CVE-2021-4031 Syltek Insufficient Verification of Data Authenticity
Attackers can bypass payment verification by forging requests to mark items as paid without valid payment, affecting Syltek application users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-4031?
CVE-2021-4031 is a high-severity vulnerability in Syltek, published on 18 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification.
Weakness: CWE-345
Which versions are affected by CVE-2021-4031?
It affects 1 product.
Products include Syltek Syltek.
How do I fix CVE-2021-4031?
No fix has been published for CVE-2021-4031 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-4031 being exploited?
There is no known exploitation of CVE-2021-4031 in the wild and no public exploit code.
Sources
Also known as GHSA-v62q-78f9-67xv.