← Database

CVE-2024-48536

HIGH CVSS: 7.5 Published: 2024-11-20 Modified: 2026-06-17

Description

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.

Affected Platforms

Esoftplanner Esoft Planner

Weakness Type

CWE-79

References