What’s Vulnerable › Vulnerabilities

CVE-2021-34369

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-06-09 · updated 2026-06-17

Description

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "the information that is being queried is authorized for an authenticated user of that application, so we consider this not applicable.

Affected products

• Accela Civic Platform: through 20.1

References

• http://packetstormsecurity.com/files/163116/Accela-Civic-Platform-21.1-Insecure-Direct-Object-Reference.html
• https://gist.github.com/0xx7/58943bb6e9ef77a09d3c7eb00dcafdc7
• http://packetstormsecurity.com/files/163116/Accela-Civic-Platform-21.1-Insecure-Direct-Object-Reference.html
• https://gist.github.com/0xx7/58943bb6e9ef77a09d3c7eb00dcafdc7

Get alerted when CVE-2021-34369 or the next vulnerability affects your stack