CVE-2024-54251

Name of the Vulnerable Software and Affected Versions: Prodigy Commerce versions 3.0.9 and earlier

Description: The issue is related to a Missing Authorization vulnerability in Prodigy Commerce, allowing the exploitation of incorrectly configured access control security levels.

Recommendations: For Prodigy Commerce versions 3.0.9 and earlier, update to a version that contains a fix for this issue, as the current version allows exploitation of security levels that are not configured correctly. At the moment, there is no information about a newer version that contains a fix for this vulnerability.