MINI-2R8R-F5GJ-W6XR

Bulletin has no description...

CVE-2023-3228

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228

CVE-2023-3228 concerns fossbilling/fossbilling prior to 0.5.0 and is evidenced by a risk described in connected Huntr documentation: a business logic flaw where an attacker can modify the product ID during order processing to bypass the main product requirement and directly purchase an addon. Aff...