PT-2022-18327
CVE-2022-27247
·
تاريخ النشر
2022-05-13
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
cdSoft Onlinetools-Smart Winhotel.MX version 2021
Description
The issue allows an attacker to download sensitive customer information, including date of birth, full address, mail information, and phone number, via an Insecure Direct Object Reference in the GastKont component.
Recommendations
For cdSoft Onlinetools-Smart Winhotel.MX version 2021, consider restricting access to the GastKont component to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾