CVE-2023-36238

Insecure Direct Object Reference IDOR in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter...

CVE-2023-36238

Insecure Direct Object Reference IDOR in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter...

CVE-2023-36238

Bagisto versions 1.5.0 through 1.5.1 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The root cause is the insufficient validation of the invoice ID parameter within the print function of the OrderController.php component. This vulnerability allows an attacker to manipulate the...