Medium · 6.5 CVE-2022-24385 EUVD-2022-29277GHSA-w772-882m-xx33

Information disclosure via direct object access on SmarterTrack v100.0.8019.14010

Published Mar 14, 2022 · Updated Mar 11, 2025 · Assigned by DIVD

Vendor: SmarterTools Product: SmarterTrack

Description

A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

Affected products

Vendor	Product	Affected	Fixed
SmarterTools	SmarterTrack	100.x – < Build 8075	Build 8075

References

https://csirt.divd.nl/DIVD-2021-00029 related
https://csirt.divd.nl/CVE-2022-24385 third-party-advisory