| Package | Affected versions | Patched versions |
|---|---|---|
| bold workplanner | < 2.5.25 | 2.5.25 |
Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic employee details using unauthorised internal identifiers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free