| Package | Affected versions | Patched versions |
|---|---|---|
| flygo | < 1.91.1 | 1.91.1 |
The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free