Skip to content
OpenAdvisories
Medium · 4.1 CVE-2024-49373 EUVD-2024-43408

Centurion ERP user can view projects from organizations they're not apart of

Published Oct 22, 2024 · Updated Oct 22, 2024 · Assigned by GitHub_M

Description

No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem.

Affected products

VendorProductAffectedFixed
nofusscomputing centurion_erp < 1.2.1 —

References