IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data.
References
Configurations
No configuration.
History
07 May 2024, 12:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-07 12:15
Updated : 2024-05-07 13:39
NVD link : CVE-2024-4538
Mitre link : CVE-2024-4538
CVE.ORG link : CVE-2024-4538
JSON object : View
Products Affected
No product.
CWE
CWE-639
Authorization Bypass Through User-Controlled Key