Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5gfp-2jp5-79wx

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC bar code present on the MarketCard. An attacker could exploit this vulnerability by generating a copy of a customer's bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticated disclosure of information.

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC bar code present on the MarketCard. An attacker could exploit this vulnerability by generating a copy of a customer's bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticated disclosure of information.

EPSS

Процентиль: 41%
0.00188
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.2
nvd
около 7 лет назад

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC bar code present on the MarketCard. An attacker could exploit this vulnerability by generating a copy of a customer's bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticated disclosure of information.

EPSS

Процентиль: 41%
0.00188
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-200