Description
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.
High · 7.5
CVE-2024-38453
EUVD-2024-37339GHSA-6w4j-5cmh-9j58
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid…
Published Jul 3, 2024 · Updated Aug 2, 2024 · Assigned by mitre