Security Advisory
CVE-2023-36238
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Insecure Direct Object Reference (IDOR) in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter.