Access Control Misconfiguration in Torod by Torod Holding LTD

CVE-2024-55995

Summary

A missing authorization vulnerability in the Torod product from Torod Holding LTD allows for the exploitation of incorrectly configured access control security levels. This issue impacts versions from n/a to 1.7, potentially enabling unauthorized users to gain elevated permissions and access restricted functionalities within the application. Organizations using affected versions should implement immediate security measures to address this vulnerability and safeguard their systems from potential exploitation.

References