CVE-2023-36644 | THREATINT

Description

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.

PUBLISHED Reserved 2023-06-25 | Published 2024-04-04 | Updated 2024-08-27 | Assigner mitre

HIGH: 7.5CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N

References

github.com/caffeinated-labs/CVE-2023-36644

cve.org (CVE-2023-36644)

nvd.nist.gov (CVE-2023-36644)

Download JSON

help @ threatint.eu