Remote User Access to Sensitive User Data via IDOR Vulnerability

CVE-2024-4538

What is CVE-2024-4538?

An Insecure Direct Object Reference (IDOR) vulnerability exists in Janto Ticketing Software, specifically affecting version 4.3r10. This security flaw allows a remote attacker to manipulate requests to obtain access to other users' event tickets using the ticket reference ID. Such exploitation can result in unauthorized access to sensitive user data, raising severe concerns over user privacy and data protection within the application.

References