Security Advisory
CVE-2023-36643
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.