Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route /account/Register/ and in the parameters UserName=&Password=&ConfirmPassword=.
The code does not function according to its published specifications, potentially leading to incorrect usage.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mesbook | Mesbook | 20221021.03 (including) | 20221021.03 (including) |