Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huntrLujiefsi390643F0-106B-4424-835D-52610AEFA4C7
HistoryJun 10, 2023 - 6:35 a.m.

Downloadable product type lacks order status check

2023-06-1006:35:49
lujiefsi
www.huntr.dev
5
vulnerability
fossbilling
bugbounty
api
upgrade

0.001 Low

EPSS

Percentile

34.4%

JSON

Description

There is a vulnerability in fossbilling where upgrading non-active orders is prevented, but it is possible to still do so through the upgrade API.

Related

cvelist 1
cve 1
osv 1
prion 1
nvd 1
cvelist
cvelist
CVE-2023-3230 Missing Authorization in fossbilling/fossbilling
2023-06-14 00:00:00
cve
cve
CVE-2023-3230
2023-06-14 06:15:08
osv
osv
CVE-2023-3230
2023-06-14 06:15:08
prion
prion
Authorization
2023-06-14 06:15:00
nvd
nvd
CVE-2023-3230
2023-06-14 06:15:08

0.001 Low

EPSS

Percentile

34.4%

JSON
Related for 390643F0-106B-4424-835D-52610AEFA4C7
cvelist1cve1osv1prion1nvd1