Description
A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Multiple endpoints are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Indian Invoicing System | 1.0 | — |
References
- VDB-365393 | SourceCodester Indian Invoicing System Backend Endpoint access control vdb-entry
- VDB-365393 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- Submit #813608 | SourceCodester Invoice-System 1.0 Broken Access Control third-party-advisory
- https://gist.github.com/c4ttr4ck/db84fc2af3e542acf1eab685264bcfc1 exploit
- https://www.sourcecodester.com/ product