In short
- CVE-2023-38872 is a LOW (CVSS 3.7) vulnerability affecting gugoan/economizzer, economizzer (economizzer).
- Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 54.9% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker to access cash book entry attachments of any other user, if they know the Id of the attachment.
NVD description
An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker to access cash book entry attachments of any other user, if they know the Id of the attachment.
More vulnerabilities in gugoan/economizzer
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free