CVE-2021-33831 describes an Incorrect Access Control vulnerability in the TH Wildau COVID-19 Contact Tracing application, specifically within the api/account/register endpoint. An attacker can exploit this flaw to create numerous random user accounts, potentially disrupting the accuracy and effectiveness of infection chain tracing. This vulnerability carries a CVSS score of 6.5 (Medium), indicating it can be exploited over the network with low attack complexity and requires low privileges, leading to high availability impact by interfering with the application's intended function. Currently, there is no evidence of active exploitation, no public exploit code available (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2021-09-01CPE matchmatch criteria | cpe:2.3:a:th-wildau:covid-19_contact_tracing:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.