CVE-2021-42116 is an Incorrect Access Control vulnerability affecting Business-DNA Solutions GmbH’s TopEase Platform versions up to 7.1.27. An authenticated, low-privileged attacker can view the Shape Editor and Settings, typically reserved for higher-privileged users, by identifying these components in the front-end source code. This vulnerability has a CVSS score of 4.3 (Medium), indicating a low attack complexity and potential for limited confidentiality impact, with no integrity or availability impact. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 7.1.27CPE matchmatch criteria | cpe:2.3:a:businessdnasolutions:topease:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.