Medium severity4.3NVD Advisory· Published Feb 19, 2021· Updated Jun 17, 2026

CVE-2021-3339

Description

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

Affected products

ModernFlow/ModernFlowdescription
Microsoft/Modernflow
cpe:2.3:a:microsoft:modernflow:*:*:*:*:*:*:*:*
Range: <1.3.00.208
ModernFlow/ModernFlowllm-create
Range: <1.3.00.208
Acctech Systems/ModernFlowllm-fuzzy
Range: <1.3.00.208

Patches

Vulnerability mechanics

References

4sightwebsite.azurewebsites.net/mf_releaseNotesnvdBroken Link
appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saasnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000