Description
Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended (horizontal privilege escalation).
High · 8.8
CVE-2024-32166
EUVD-2024-29985GHSA-5xj8-9pp7-w546
Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now a…
Published Apr 19, 2024 · Updated Aug 2, 2024 · Assigned by mitre