High severity7.5NVD Advisory· Published Dec 7, 2021· Updated Jun 17, 2026
CVE-2021-43175
CVE-2021-43175
Description
The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other PHP files that implement the various API functions. Vulnerable versions of GOautodial validate the username and password incorrectly, allowing the caller to specify any values for these parameters and successfully authenticate. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2< commit 3c3a979+ 1 more
- (no CPE)range: < commit 3c3a979
- (no CPE)range: < 3c3a979
Patches
Vulnerability mechanics
References
1- www.synopsys.com/blogs/software-security/cyrc-advisory-goautodial-vulnerabilitiesnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.