Vendor
harung1993
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
DollarDollar through 4.4 Missing Authorization in /add_expense Balance Tampering
DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated users to modify other users' account balances by supplying foreign account_id values. Attackers can submit sequential account_id, destination_ac…