High · 7.5 CVE-2024-48536 EUVD-2024-43214GHSA-j33p-727h-4cv5

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a …

Published Nov 20, 2024 · Updated Dec 3, 2024 · Assigned by mitre

Description

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.

References

https://github.com/esoft-planner-cve/esoft_planner_cve