PT-2024-16735 · Talya Informatics · Talya Informatics Travel Apps
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Talya Informatics Travel APPS versions prior to 17.0.68
Description
The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows exploiting incorrectly configured access control security levels.
Recommendations
For versions prior to 17.0.68, update to version 17.0.68 or later to resolve the issue.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Talya Informatics Travel Apps