Skip to content
OpenAdvisories

Product · issuetrak

audit

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.7

    IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp

    A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference (IDOR) vulnerability in the Issuetrak audit component. The vulnerability enables u…