CVE-2021-37212: Larvata Flygo

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the bulletin ID in specific Url parameters and access and modify bulletin particular content.

Affected products

• Larvata Flygo: before 1.91.1 (fixed in 1.91.1)

Published 2021-08-09. Last modified 2026-06-17.