CVE-2024-44313
1 advisory.
Packagist/tastyigniter/tastyigniter CVE-2024-44313: high 8.1, EPSS 0.74%
TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function
Action: Upgrade tastyigniter/tastyigniter to 4.0.0 or later.
composer require tastyigniter/tastyigniter:4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-gg2f-r4jh-vpmh
- https://nvd.nist.gov/vuln/detail/CVE-2024-44313
- https://github.com/tastyigniter/TastyIgniter
- https://github.com/tastyigniter/TastyIgniter/blob/3.x/app/admin/controllers/Orders.php
- https://medium.com/@cnetsec/cve-2024-44313-incorrect-access-control-in-tastyigniter-3-7-6-01a73c548b74
CVE-2024-44313 · published · modified · JSON