29328 matches found
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the ticket creation process. An attacker can gain unauthorized access to reference services belonging to other users by manipulating the service ID parameter in the request. Remediation Upgrade paymenter/payment...
MINI-33MG-RPJC-RRW8
Bulletin has no description...
MINI-M2F9-H88F-75R9
Bulletin has no description...
MINI-HP36-PR2W-J2PX
Bulletin has no description...
MINI-FX8G-64PQ-2CFC
Bulletin has no description...
MINI-H2JV-C6FG-3896
Bulletin has no description...
MINI-FWPH-Q6QW-JGCW
Bulletin has no description...
MINI-RCHQ-57C9-38FW
Bulletin has no description...
MINI-RV5G-3G5Q-J796
Bulletin has no description...
MINI-H42C-435V-8RP9
Bulletin has no description...
MINI-VVQ9-GP5W-FCJ8
Bulletin has no description...
MINI-PV5C-WWFQ-9WM7
Bulletin has no description...
MINI-WVXW-WV8F-75JG
Bulletin has no description...
MINI-32PM-GMGX-CXW8
Bulletin has no description...
MINI-CH3H-GHCJ-9MWW
Bulletin has no description...
MINI-CVRR-36PW-82CM
Bulletin has no description...
MINI-5787-GGPC-HVWX
Bulletin has no description...