CVE-2024-32166

The open-source auction website building solution WeBid (specifically version 1.2.1 ) is vulnerable to an Insecure Direct Object Reference (IDOR) , which is a form of Broken Access Control . This flaw allows for horizontal privilege escalation , enabling an attacker to perform a "buy now" action ...