Economizzer Insecure Direct Object Reference vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-38872 · ADVISORY
• gugoan/economizzer commit 3730880 · WEB
• dub-flow/vulnerability-research · WEB
• gugoan/economizzer · PACKAGE
• economizzer.org · WEB

Altre vulnerabilità di gugoan/economizzer

• CVE-2023-38877ALTO 8.8A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially cra…
• CVE-2023-38874ALTO 8.8A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April…
• CVE-2023-38873MEDIO 6.5The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redre…
• CVE-2023-38871MEDIO 5.3The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password …