CVE-2022-27247

Affected software: cdSoft Onlinetools-Smart Winhotel.MX 2021. The vulnerability is described as an Insecure Direct Object Reference (GastKont) that permits an attacker to download sensitive customer data (e.g., date of birth, full address, email, phone). Root cause indicated as improper exposure/...