Skip to content
OpenAdvisories

Vendor

Talya Informatics

4 known vulnerabilities.

Products

Elektraweb 2 Travel APPS 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-1107

    IDOR in Talya Informatics' Travel APPS

    Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68.

    Talya Informatics Travel APPS
  • Critical 9.8
    CVE-2024-0949

    Improper Access Control in Talya Informatics' Elektraweb

    Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68.

    Talya Informatics Elektraweb
  • Critical 9.8
    CVE-2024-0947

    Cookies Manipulation in Talya Informatics' Elektraweb

    Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Toke…

    Talya Informatics Elektraweb