← Database

CVE-2022-30628

MEDIUM CVSS: 4.8 Published: 2022-07-21 Modified: 2026-06-17

Description

It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX

Affected Platforms

Supersmart Supersmart.Me - Walk Through

Weakness Type

NVD-CWE-noinfo

References