CVE-2022-36539

CVE-2022-36539 Insecure Direct Object Reference IDOR WeDayCare B.V. L'app WeDayCare B.V Ouderapp precedente alla v1.1.22 consente agli aggressori di modificare il valore ID nelle chiamate intercettate per ottenere accesso ai dati di altri genitori e bambini. Il traffico con l'API viene reso...

EUVD-2022-39246

Malicious code in bioql PyPI...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

Code injection

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

CVE-2022-36539 affects WeDayCare B.V. Ouderapp prior to v1.1.22. The issue allows an attacker to alter the ID value in intercepted calls, enabling access to data of other parents and children. Root cause is unprotected/modifiable ID parameter in communications. Impact is data exposure of other us...

PT-2022-23453 · Wedaycare B.V · Ouderapp

Name of the Vulnerable Software and Affected Versions: WeDayCare B.V Ouderapp versions prior to 1.1.22 Description: The issue allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children. Recommendations: For versions prior to 1.1.22, update...