Skip to content
OpenAdvisories

Vendor

DinoRANK

1 known vulnerabilities.

Products

DinoRANK 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-40673

    Missing Authorization in DinoRANK

    A Missing Authorization vulnerability has been found in DinoRANK. This vulnerability allows an attacker to access invoices of any user via accessing endpoint '/facturas/YYYY-MM/SDRYYMM-XXXXX.pdf' because there is no access control. The pdf filename can be obt…

    DinoRANK DinoRANK