Security Advisory

CVE-2024-44313

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-18 00:00:00

Last updated 2025-03-25 18:16:50

Assigner mitre

State PUBLISHED

Description

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

← Browse all CVEs View on cve.org ↗