CVE-2023-38872

An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker…

published September 28, 2023

CVSS
—
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker to access cash book entry attachments of any other user, if they know the Id of the attachment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00748 · 54.4th percentile
Published
2023-09-28T00:00Z
EPSS history
Timeline
  • 28 SEP 00:00Z
    An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker…
    cvelistv5