CVE-2021-37331

Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and viewing it, ID Cards and Trade Licenses of other vendors/users can be viewed by changing the URL...

CVE-2021-37331

creationtimestamp| type| source ---|---|--- 2021-10-04 18:18:39+00:00| seen| https://t.me/cibsecurity/29868...

CVE-2021-37331

CVE-2021-37331 affects Booking Core 2.0 (Laravel Booking System). The issue is an Incorrect Access Control on the Verifications page: after uploading an ID Card or Trade License, an attacker can view their own document, and by changing the URL, view IDs/licenses of other vendors/users. Documents ...

CVE-2021-37331

Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and viewing it, ID Cards and Trade Licenses of other vendors/users can be viewed by changing the URL...