Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended (horizontal privilege escalation).
CVSS
No CVSS.
References
Configurations
No configuration.
History
19 Apr 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-19 14:15
Updated : 2024-04-19 16:19
NVD link : CVE-2024-32166
Mitre link : CVE-2024-32166
CVE.ORG link : CVE-2024-32166
JSON object : View
Products Affected
No product.
CWE
No CWE.