PT-2026-54829

Name of the Vulnerable Software and Affected Versions MCO version 25.3.3.1 Description An Insecure Direct Object Reference IDOR exists in the '/customer/servlet/mco/webapi/trading-document/fetchPdfStatement' endpoint. The application fails to properly validate if an authenticated user is authoriz...