~ / search / GHSA-pmc7-hmmw-g96q

GHSA-pmc7-hmmw-g96q

Bagisto vulnerable to Insecure Direct Object Reference (IDOR)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-36238

Packages

EcosystemPackageAffectedFixed in
Packagist bagisto/bagisto < 1.3.2 1.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

Insecure Direct Object Reference (IDOR) in Bagisto v.1.5.0 allows an attacker to obtain sensitive information via the invoice ID parameter.

References

External links from the advisory. They lead to third-party sites.