Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-38872

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-896v-ph5w-379h

Economizzer Insecure Direct Object Reference vulnerability An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker to access cash book entry attachments of any other user, if they know the Id of the attachment.

gitlab/packagist/gugoan/economizzer/CVE-2023-38872

Economizzer Insecure Direct Object Reference vulnerability An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker to access cash book entry attachments of any other user, if they know the Id of the attachment.