Skip to content
OpenAdvisories
High · 8.7 CVE-2024-47089 EUVD-2024-42272GHSA-mxf3-c3v5-9jpv

Unauthorized Transaction Manipulation Vulnerability

Published Sep 19, 2024 · Updated Sep 19, 2024 · Assigned by CERT-In

Description

This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users.

Affected products

VendorProductAffectedFixed
Apex Softcell LD Geo <4.0.0.7 —

References