PT-2024-36651
CVE-2024-55997
·
تاريخ النشر
2024-12-14
·
تاريخ التحديث
2024-12-18
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Web Chunky Order Delivery & Pickup Location Date Time versions through 1.1.0
Description
The issue is related to a Missing Authorization vulnerability, which allows attackers to exploit incorrectly configured access control security levels. This vulnerability affects the Order Delivery & Pickup Location Date Time component.
Recommendations
For versions through 1.1.0, consider restricting access to the Order Delivery & Pickup Location Date Time component until a patch is available. As a temporary workaround, review and correct the access control security levels to prevent unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾