CVE-2022-30628 — Supersmart.me – Walk Through access to business information without authentication
It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can th…
Published: 2022-07-21 · CVSS: 4.8 · CVSS 3.1
It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7