CVE-2024-37889

Publication date

2024-06-14 19:12:14

Family

GitHub_M

State

PUBLISHED

Description

MyFinances is a web application for managing finances. MyFinances has a way to access other customer invoices while signed in as a user. This method allows an actor to access PII and financial information from another account. The vulnerability is fixed in 0.4.6.