PT-2024-36651

CVE-2024-55997

·

Published

2024-12-14

·

Updated

2024-12-18

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Web Chunky Order Delivery & Pickup Location Date Time versions through 1.1.0
Description The issue is related to a Missing Authorization vulnerability, which allows attackers to exploit incorrectly configured access control security levels. This vulnerability affects the Order Delivery & Pickup Location Date Time component.
Recommendations For versions through 1.1.0, consider restricting access to the Order Delivery & Pickup Location Date Time component until a patch is available. As a temporary workaround, review and correct the access control security levels to prevent unauthorized access.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾