CVE-2024-39033

In Newgensoft OmniDocs 11.0SP103006, Insecure Direct Object Reference IDOR in the getuserproperty function allows user's configuration and PII to be stolen...

CVE-2024-39033

In Newgensoft OmniDocs 11.0SP103006, Insecure Direct Object Reference IDOR in the getuserproperty function allows user's configuration and PII to be stolen...

CVE-2024-39033

creationtimestamp| type| source ---|---|--- 2025-02-06 16:33:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113957905301277693 2025-02-06 17:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlmxhfvs2v 2025-02-06 18:48:55+00:00| seen|...

CVE-2024-39033

In Newgensoft OmniDocs 11.0 SP1 03 006, CVE-2024-39033 describes an Insecure Direct Object Reference (IDOR) in the getuserproperty function, allowing theft of a user’s configuration and PII. Affected component: getuserproperty in OmniDocs. Root cause: IDOR could enable unauthorized access to conf...

CVE-2024-39033

In Newgensoft OmniDocs 11.0SP103006, Insecure Direct Object Reference IDOR in the getuserproperty function allows user's configuration and PII to be stolen...