← Database

CVE-2024-46635

MEDIUM CVSS: 5.9 Published: 2024-09-30 Modified: 2026-06-17

Description

An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter.

Affected Platforms

Unknown

Weakness Type

CWE-922

References