CVE-2023-36643

Publication date

2024-04-04 00:00:00

Family

mitre

State

PUBLISHED

Description

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.