CVE-2024-44313: High severity tastyigniter vulnerability
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44313?
CVE-2024-44313 has been classified as a medium severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2024-44313?
To fix CVE-2024-44313, update TastyIgniter to the latest version where the incorrect access control vulnerability has been addressed.
What systems are affected by CVE-2024-44313?
CVE-2024-44313 affects TastyIgniter version 3.7.6 and earlier versions.
What kind of vulnerability is CVE-2024-44313?
CVE-2024-44313 is an Incorrect Access Control vulnerability that allows unauthorized users to access and generate invoices.
Can CVE-2024-44313 lead to data exposure?
Yes, CVE-2024-44313 can lead to potential data exposure as it allows unauthorized users to access sensitive invoice information.