CVE-2021-37331

Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control

published October 4, 2021

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and viewing it, ID Cards and Trade Licenses of other vendors/users can be viewed by changing the URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00969 · 61.5th percentile
Published
2021-10-04T13:37Z
EPSS history
Timeline
  • 04 OCT 13:37Z
    Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control
    cvelistv5