Description
An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies.
Unscored
CVE-2021-44838
EUVD-2021-31641GHSA-phg8-x4rr-qpgf
An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access …
Published Jan 18, 2022 · Updated Aug 4, 2024 · Assigned by mitre