CVE-2024-50647
The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/a…
Published: 2024-11-15 · CVSS: 7.5 · CVSS 3.1
The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7