PT-2024-12734

CVE-2023-38520

·

Published

2024-06-04

·

Updated

2024-06-04

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Pinpoint Booking System versions 2.9.9.3.4 and earlier
Description The issue affects the Pinpoint Booking System, allowing for functionality misuse due to an External Control of Assumed-Immutable Web Parameter vulnerability.
Recommendations For versions 2.9.9.3.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-472: External Control of Assumed-Immutable Web Parameter
Related identifiers
CVE-2023-38520
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com