CVE-2023-36643

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-04-04

Last modified

2024-08-02

Weaknesses

CWE-284

Affected products

• Tradepro (Itb-pim)
• Tradepro (Itb Gmbh)

References

• https://github.com/caffeinated-labs/CVE-2023-36643