CVE-2023-47392

CVE-2023-47392 concerns the Mercedes me iOS app (versions 1.34.0 and below). The issue is an access control vulnerability that lets an attacker view another user’s cart by sending a crafted add order request. Root cause is an access-control weakness, as stated in multiple sources. The provided co...

CVE-2023-47392

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request...