TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-44313 · ADVISORY
• tastyigniter/TastyIgniter · PACKAGE
• tastyigniter/TastyIgniter · WEB
• medium.com/@cnetsec/cve-2024-44313-incorrect-access-control-in-tastyigniter-3-7-6-01a73c548b74 · WEB

tastyigniter/tastyigniter のその他の脆弱性

• CVE-2025-61417高 8.8Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a …
• CVE-2024-44314中 6.5TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update…
• CVE-2022-0602中 5.4Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.