Insecure Direct Object Reference in Bagisto Affects Sensitive Data Access
CVE-2023-36238

Currently unrated

Key Information:

Vendor

Bagisto

Status
Bagisto
Vendor
CVE Published:
13 March 2024

What is CVE-2023-36238?

The vulnerability in Bagisto involves an Insecure Direct Object Reference (IDOR) in version 1.5.1, enabling unauthorized users to access sensitive information by manipulating the invoice ID parameter. This flaw can lead to data exposure, posing security threats for users and administrators relying on the integrity of their invoices. Proper input validation and access control measures are crucial to prevent unauthorized data access in affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/Ek-Saini/security/blob/main/IDOR-Bagisto

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.