Lucene search
HistoryMay 07, 2024 - 12:15 p.m.
CVE-2024-4537
cve-2024-4537
idor
janto ticketing software
version 4.3r10
remote user
download url
purchased ticket
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.0%
IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket.
Related
vulnrichment
vulnrichment
CVE-2024-4537 IDOR vulnerability in Janto Ticketing Software
2024-05-07 11:35:25
cve
cve
CVE-2024-4537
2024-05-07 12:15:09
cvelist
cvelist
CVE-2024-4537 IDOR vulnerability in Janto Ticketing Software
2024-05-07 11:35:25
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-4537