Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22497
HistoryFeb 13, 2020 - 5:07 a.m.

Insecure Direct Object Reference

2020-02-1305:07:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.004 Low

EPSS

Percentile

73.0%

taffy is vulnerable to direct object reference. An attacker is able to tamper the internal properties of the data item in its database and access any item by referencing an easily guessable internal index.

CPENameOperatorVersion
taffyeq2.6.2
taffyeq2.6.2

0.004 Low

EPSS

Percentile

73.0%