VULNERABILITY INTELLIGENCE

CVE-2021-28174

CVSS score6.5 MEDIUM

EPSS probability0.99%

CISA KEVNot currently listed

Published2021-04-08

Last modified2026-06-17

Description

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.