CVE-2024-11216 — Broken Access Control in PozitifIK's Pik Online
Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in PozitifIK Pik Online allows Account Footprin…
Published: 2025-03-05 · CVSS: 7.6 · CVSS 3.1
Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in PozitifIK Pik Online allows Account Footprinting, Session Hijacking. This issue affects Pik Online: before 3.1.5.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7