The vulnerability of the EvaProject (Carbon ERP) enterprise management system, related to the failure to protect the structure of the web page, allows a perpetrator to gain unauthorized access to the API token.

The vulnerability of the EvaProject Carbon ERP enterprise management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the API token by introducing a...