CVE-2024-43350

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4...

CVE-2024-43350

CVE-2024-43350 – Propovoice Propovoice CRM affects Propovoice CRM for WordPress (versions n/a through 1.7.6.4). The connected documents describe an ."Authorization Bypass Through User-Controlled Key" vulnerability (also framed as an unauthenticated Insecure Direct Object Reference) in this plugin...

WordPress Propovoice CRM Plugin <= 1.7.6.4 is vulnerable to Insecure Direct Object References (IDOR)

Software Propovoice CRM Type Plugin Vulnerable versions = 1.7.6.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-43350 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8abb6e22f372 Credits Manab Jyoti...