CVE-2021-27963: Sfcyazilim Sonlogger

High severity, CVSS 8.2. EPSS: 2.4% chance of exploitation in the next 30 days.

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.

Affected products

• Sfcyazilim Sonlogger: before 6.4.1 (fixed in 6.4.1)

Published 2021-03-05. Last modified 2026-06-17.