CVE-2024-40530

Pantera CRM versions 401.152 and 402.072 are vulnerable to an incorrect authorization issue (CWE-863). An unauthorized attacker can bypass IP-based access controls by manipulating the X-Forwarded-For header. According to some reports, this privilege vulnerability may potentially allow for arbitra...