https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6427.htmlhttps://patchthecve.com/cve/CVE-2024-6427.htmlWed, 17 Jun 2026 08:17:59 +0000HIGH 7.5: Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a payload with dangerous JavaScript code, causing the application to loop requests on itself, which could lead to resource consumption and disahttps://patchthecve.com/cve/CVE-2024-6426.htmlhttps://patchthecve.com/cve/CVE-2024-6426.htmlWed, 17 Jun 2026 08:17:59 +0000HIGH 8.1: Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.https://patchthecve.com/cve/CVE-2024-6425.htmlhttps://patchthecve.com/cve/CVE-2024-6425.htmlWed, 17 Jun 2026 08:17:59 +0000CRITICAL 9.1: Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=<RANDOMUSER>&Password=<PASSWORD>&ConfirmPassword=https://patchthecve.com/cve/CVE-2024-6424.htmlhttps://patchthecve.com/cve/CVE-2024-6424.htmlWed, 17 Jun 2026 08:17:59 +0000CRITICAL 9.3: External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST" or "/api/Proxy/Get?userName=&password=&uri=<ARCHIVO|URL INTERNA|IP/HOST" to rea