PT-2023-32695 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns Business Logic Errors in the microweber/microweber GitHub repository. Unpublished and deleted products can be added to checkout, indicating a flaw in the application'...

CVE-2023-3914

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914

CVE-2023-3914 – GitLab EE : A business-logic flaw allows access to internal projects, caused by a service account not being removed when a namespace is deleted. Affected: GitLab Enterprise Edition prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Impact: potential exposure of inter...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914

Removed by vendor...

GitLab 0 < 16.2.8 / 16.3 < 16.3.5 / 16.4 < 16.4.1 (CVE-2023-3914)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a...

FreeBSD : Gitlab -- vulnerabilities (6e0ebb4a-5e75-11ee-a365-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6e0ebb4a-5e75-11ee-a365-001b217b3468 advisory. - An information disclosure issue in GitLab CE/EE affecting all versions prior to 16.2.8, 16.3...

Froxlor Security Vulnerability

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor that stems from the presence of a business logic error...

Authorization Bypass

gitlab is vulnerable to Authorization Bypasses. A business logic error in Project Import under certain conditions may show an unauthorized user in the Access Granted column in the project membership pages, which allows an authenticated attacker to bypass authorizations...

CVE-2023-29294 Bypass Purchase Order Approval using Company User in Adobe Commerce B2B

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation ...

fossbilling 安全漏洞

fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.0 that stems from a business logic error...

fossbilling 安全漏洞

fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.0 that stems from an error in the business logic...

PT-2023-23702 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling versions prior to 0.5.0 Description: The issue concerns Business Logic Errors in the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior to 0.5.0, update to version 0.5.0 or later to resolve the issue...

Design/Logic Flaw

The Customer Management Framework CMF for Pimcore adds functionality for customer data management. In pimcore/customer-management-framework-bundle prior to version 3.3.9, business logic errors are possible in the Conditions tab since the counter can be a negative number. This vulnerability is...

PT-2023-17063 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue concerns Business Logic Errors in the GitHub repository answerdev/answer. There is no information provided about the estimated number of potentially affected devices worldwide or...

answer 安全漏洞

answer is an open source knowledge-based community software. A security vulnerability exists in answer versions prior to 1.0.6, which stems from a business logic error...

Business Logic Error

froxlor/froxlor is vulnerable to Business Logic Errors. The vulnerability exists in admintemplates.php, which allows a remote attacker to manipulate the Language Dropdown Menu and change it to an arbitrary value...

PT-2022-28031 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue concerns Business Logic Errors in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.0a7, which stems from the presence of a business logic error...

Huawei HarmonyOS Fingerprint Module Logic Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS version 2.0 contains a logic error vulnerability that stems from a business logic error in the fingerprint module. An attacker could exploit the...