CVE-2022-36539

CVE-2022-36539 Referencia Directa Insegura a Objetos IDOR WeDayCare B.V. WeDayCare B.V Ouderapp anterior a v1.1.22 permite a los atacantes alterar el valor del ID en llamadas interceptadas para obtener acceso a los datos de otros padres e hijos. El tráfico con la API se hace transparente a través...

EUVD-2022-39246

Malicious code in bioql PyPI...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

Code injection

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

CVE-2022-36539 affects WeDayCare B.V. Ouderapp prior to v1.1.22. The issue allows an attacker to alter the ID value in intercepted calls, enabling access to data of other parents and children. Root cause is unprotected/modifiable ID parameter in communications. Impact is data exposure of other us...

PT-2022-23453 · Wedaycare B.V · Ouderapp

Name of the Vulnerable Software and Affected Versions: WeDayCare B.V Ouderapp versions prior to 1.1.22 Description: The issue allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children. Recommendations: For versions prior to 1.1.22, update...