CVE-2021-4031

7.5 highEPSS 0.5%

High (7.5) in syltek syltek. EPSS 0.5% chance of exploitation in the next 30 days.

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-345
Published: 2022-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

syltek:syltek

References

https://www.incibe-cert.es/en/early-warning/security-advisories/syltek-insufficient-verification-data-authenticity
https://www.incibe-cert.es/en/early-warning/security-advisories/syltek-insufficient-verification-data-authenticity

Check your stack JSON