CVE-2021-37214

CVE-2021-37214 is an Insecure Direct Object Reference (IDOR) vulnerability found in the employee management page of Larvata Flygo. Authenticated general users can manipulate employee IDs to gain unauthorized access to, modify, and potentially delete other employee data, ultimately leading to administrator privilege and arbitrary command execution. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.