3 matches found
CVE-2023-36238
Insecure Direct Object Reference IDOR in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter...
6.5CVSS6.2AI score0.00541EPSS
SaveExploits1References1
CVE-2023-36238
CVE-2023-36238 is an IDOR in Bagisto v1.5.1 that allows an attacker to obtain sensitive information by manipulating the invoice ID parameter. The vulnerability is rooted in insufficient validation of the invoice ID passed to the application, with Red Hat and Veracode sources describing the issue ...
6.5CVSS6.1AI score0.00541EPSS
SaveExploits1References1Affected Software1
20