Skip to content
OpenAdvisories
High · 7.5 CVE-2024-39033 EUVD-2024-53893GHSA-78r2-7ff2-3mcr

In Newgensoft OmniDocs 11.0_SP1_03_006, Insecure Direct Object Reference (IDOR) in the getuserproperty function allows user's configuration…

Published Feb 6, 2025 · Updated Feb 6, 2025 · Assigned by mitre

Description

In Newgensoft OmniDocs 11.0_SP1_03_006, Insecure Direct Object Reference (IDOR) in the getuserproperty function allows user's configuration and PII to be stolen.

References