CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

CVE-2024-38453

CVE-2024-38453 affects the Avalara for Salesforce CPQ app for Salesforce, prior to version 7.0. The vulnerability allows attackers to read an API key. The public notes indicate the current version is 11 as of mid-2024. The connected documents do not provide detailed root cause analysis, specific ...

A Bootiful Podcast: Avalara's Kumaresan Muthaliar on GraphQL in the heavily regulated, data intensive domain of tax

Hi, Spring fans! In this installment Josh Long @starbuxman talks to Kumaresan Muthaliar, senior technical lead at Avalara, about GraphQL in the heavily regulated, data intensive domain of tax...

A Bootiful Podcast: Avalara's Kumaresan Muthaliar on GraphQL in the heavily regulated, data intensive domain of tax

Hi, Spring fans! In this installment Josh Long @starbuxman talks to Kumaresan Muthaliar, senior technical lead at Avalara, about GraphQL in the heavily regulated, data intensive domain of tax...

avalara.com XSS vulnerability

Vulnerable URL: https://www.avalara.com/products/?alert/OPENBUGBOUNTY/...

avalara.com XSS vulnerability

Vulnerable URL: https://www.avalara.com/?qwex'alert/OPENBUGBOUNTY/...