CVE-2024-9671 — System: pdf invoices of the developer users can be seen if the url is known
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or g…
Published: 2024-10-09 · CVSS: 5.3 · CVSS 3.1
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7