CVE-2024-38453

Publication date

2024-07-03 00:00:00

Family

mitre

State

PUBLISHED

Description

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.