CVE-2024-37889
MyFinances Allows Unauthorized Access to Other Customer Data
Résumé
MyFinances Allows Unauthorized Access to Other Customer Data
Description d'origine
La description telle que publiée par la source (souvent en anglais).
MyFinances is a web application for managing finances. MyFinances has a way to access other customer invoices while signed in as a user. This method allows an actor to access PII and financial information from another account. The vulnerability is fixed in 0.4.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com