8 matches found
CVE-2024-46635
An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter...
CVE-2024-46635
An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter...
CVE-2024-46635
The INROAD digital industrialization application, developed by Isogong Tongzhi , is vulnerable in versions prior to v202402060 . A security flaw in the /AccountMaster/GetCurrentUserInfo API endpoint allows attackers to access sensitive user information—such as account IDs , usernames , and email ...
CVE-2024-46635
An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter...
INROAD 安全漏洞
INROAD is a digital industrialization application from the Chinese company Isogong Tongzhi INROAD. A security vulnerability exists in versions prior to INROAD v202402060. An attacker exploited the vulnerability to access sensitive information by sending a specially crafted payload to the...
PT-2024-32085 · Inroad · Inroad
Name of the Vulnerable Software and Affected Versions: INROAD versions prior to v202402060 Description: The issue concerns the API endpoint "/AccountMaster/GetCurrentUserInfo" where attackers can access sensitive information by sending a crafted payload to the UserNameOrPhoneNumber parameter. Thi...
CVE-2024-46635
An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter...
CVE-2024-46635: Insecure Storage of Sensitive Information
An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter...