CVE-2019-11488

The CVE-2019-11488 entry concerns SimplyBook.me Enterprise prior to 2019-04-23, where an Incorrect Access Control flaw in the Account Access / Password Reset Link could allow unauthorized attackers to read/write Customer or Administrator data via a persistent HTTP GET hash link replay (demonstrat...