What’s Vulnerable › Vulnerabilities

CVE-2021-3339

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-19 · updated 2026-06-17
• Weakness: CWE-287

Description

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

Affected products

• Microsoft Modernflow: before 1.3.00.208 — fixed in 1.3.00.208

How to fix

Upgrade to a fixed version: Microsoft Modernflow 1.3.00.208. Check the vendor advisory for mitigations.

References

• https://4sightwebsite.azurewebsites.net/mf_releaseNotes
• https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview
• https://4sightwebsite.azurewebsites.net/mf_releaseNotes
• https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview

Get alerted when CVE-2021-3339 or the next vulnerability affects your stack