CVE-2024-38453

HIGH CVSS: 7.5 Published: 2024-07-03 Modified: 2026-06-17

Description

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.

Affected Platforms

Unknown

Weakness Type

CWE-522, CWE-922

References