Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qc6-wq65-6w7q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI.

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI.

EPSS

Процентиль: 52%
0.00293
Низкий

Связанные уязвимости

CVSS3: 4.3
nvd
около 5 лет назад

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI.

EPSS

Процентиль: 52%
0.00293
Низкий