1 matches found
Weblate: **Unauthenticated IDOR allows modification of payment customer billing information**
The application contained an access control issue in the payment billing information edit functionality. An unauthenticated user was able to access the payment edit endpoint and modify the billing information associated with a payment without any authorization check. The issue occurred because th...
5.9AI score
SaveExploits0
20