CVE-2023-38872

creationtimestamp| type| source ---|---|--- 2023-09-28 07:46:44+00:00| seen| https://t.me/cibsecurity/71171...

CVE-2023-38872

CVE-2023-38872 concerns an IDOR in the open-source personal finance app Economizzer. The vulnerability affects commit 3730880 (April 2023) and the v0.9-beta1 release, allowing any unauthenticated attacker who knows an attachment’s ID to access cash book entry attachments belonging to other users....