Skip to content
OpenAdvisories

Vendor

flexprice

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.9

    FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass

    FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged …