| Package | Affected versions | Patched versions |
|---|---|---|
| loyalty experience platform | < 2020.1.0.1 | 2020.1.0.1 |
An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free