Skip to content
OpenAdvisories
High · 8.8 CVE-2024-3305 EUVD-2024-31895GHSA-375w-qxcp-h82p

IDOR in Utarit Information's SoliClub

Published Sep 12, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.

This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

Affected products

VendorProductAffectedFixed
Utarit Information SoliClub < 4.4.0, < 5.2.1 4.4.0

References