CVE-2021-33831: Th-Wildau Covid-19 Contact Tracing

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds.

Affected products

• Th-Wildau Covid-19 Contact Tracing: up to and including 2021-09-01

Published 2021-09-07. Last modified 2026-06-17.