CVE-2023-36238

Description

Insecure Direct Object Reference (IDOR) in Bagisto v.1.5.0 allows an attacker to obtain sensitive information via the invoice ID parameter.

Affected packages (1)

• Packagist/bagisto/bagistofrom 0, < 1.3.2

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-36238
• PATCHhttps://github.com/bagisto/bagisto
• WEBhttps://github.com/bagisto/bagisto/commit/2a24098cb582e072c87177e0ad17be45f240ad17
• WEBhttps://github.com/bagisto/bagisto/pull/4697
• WEBhttps://github.com/Ek-Saini/security/blob/main/IDOR-Bagisto