| Package | Affected versions | Patched versions |
|---|---|---|
| egov | = 12.0 |
In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the unvalidated UserIndex parameter, aka Insecure Direct Object Reference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free