Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-2713 EUVD-2023-34177GHSA-qmfj-76r4-vwg3

IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Published May 20, 2023 · Updated May 22, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.

This issue affects Rental Module: before 23.05.15.

Affected products

VendorProductAffectedFixed
— Rental Module < 23.05.15 23.05.15

References