| Package | Affected versions | Patched versions |
|---|---|---|
| ocomon | = 4.0< 4.0 | 4.0 |
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free