Unauthorized Access Issue in No Fuss Computing Centurion ERP Software
CVE-2024-49373

4.3MEDIUM

Key Information:

Vendor

Nofusscomputing

Status
Centurion Erp
Vendor
CVE Published:
22 October 2024

What is CVE-2024-49373?

No Fuss Computing's Centurion ERP, an open-source enterprise resource planning solution, has a vulnerability that allows authenticated users to access projects within organizations they are not a member of. This flaw compromises the confidentiality of project data, enabling users to potentially exploit sensitive information. The issue has been resolved in version 1.2.1, which eliminates unauthorized project visibility, reinforcing security protocols for organizational data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/nofusscomputing/centurion_erp/security...
https://github.com/nofusscomputing/centurion_erp/pull/358
https://github.com/nofusscomputing/centurion_erp/commit/c...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.