CVE-2021-37234

6.5 mediumEPSS 0.4%

Medium (6.5) in modern honey network project modern honey network. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWEs: CWE-306, CWE-352
Published: 2023-02-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

modern_honey_network_project:modern_honey_network

References

https://github.com/pwnlandia/mhn/issues/809
https://github.com/pwnlandia/mhn/issues/809

Check your stack JSON