Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-0949 EUVD-2024-16728GHSA-vh95-79cj-7hvx

Improper Access Control in Talya Informatics' Elektraweb

Published Jun 27, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.

This issue affects Elektraweb: before v17.0.68.

Affected products

VendorProductAffectedFixed
Talya Informatics Elektraweb < v17.0.68 v17.0.68

References