TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

ALTO 8.1CVE-2024-44313 · GHSA-gg2f-r4jh-vpmh · Published 18/03/2025 · updated 17/06/2026

In breve

CVE-2024-44313 è una vulnerabilità ALTO (CVSS 8.1) che riguarda tastyigniter/tastyigniter, tastyigniter (tastyigniter).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.6% delle vulnerabilità.
Correzione: aggiornare a 4.0.0 o successiva.

Package	Affected versions	Patched versions
tastyigniter/tastyigniter Packagist	`< 4.0.0`	`4.0.0`
tastyigniter tastyigniter	`= 3.7.6`	No fix yet

Description

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2024-44313 · ADVISORY
tastyigniter/TastyIgniter · PACKAGE
tastyigniter/TastyIgniter · WEB
medium.com/@cnetsec/cve-2024-44313-incorrect-access-control-in-tastyigniter-3-7-6-01a73c548b74 · WEB

Altre vulnerabilità di tastyigniter/tastyigniter

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tastyigniter/tastyigniter

Packagist

< 4.0.0

4.0.0

tastyigniter

= 3.7.6

No fix yet

Description

NVD description

Altre vulnerabilità di tastyigniter/tastyigniter

Vedi tutto →