CVE-2024-50647

The CVE-2024-50647 entry concerns the python_food ordering system V1.0, where an unauthorized access flaw affects the /api/myapp/index/user/info endpoint. The root cause appears to be missing authorization checks, allowing an attacker to modify the id parameter (id=1) to enumerate or access sensi...