CVE-2021-27963

HIGH 8.2CVE-2021-27963 · Published 05/03/2021 · updated 17/06/2026

In short

CVE-2021-27963 is a HIGH (CVSS 8.2) vulnerability affecting sonlogger (sfcyazilim).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.4% of all vulnerabilities.
Fix: update to 6.4.1 or later.

Package	Affected versions	Patched versions
sonlogger sfcyazilim	`< 6.4.1`	`6.4.1`

Description

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.

References

erberkan/SonLogger-vulns · Exploit
sonlogger.com/releasenotes · Release Notes

More vulnerabilities in sonlogger

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free