CVE-2024-48536

CVE-2024-48536 concerns an improper access control in the scheduling software eSoft Planner (v3.24.08271-USA). The vulnerability allows an attacker to view all company transactions by sending a crafted web request, as described across multiple sources (NVD/Red Hat/CNNVD/CVE lists). The underlying...