Security Advisory
CVE-2021-36388
7.5
HIGH
Vulnerability Description
In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIIAvatarImage.i4".
Published Date
October 14, 2021
Official Source
NIST NVD Advisory