3scale vulnerabilities

CVEs whose affected-version data names the 3scale package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-9671Medium· 5.3

2y ago

System: pdf invoices of the developer users can be seen if the url is known

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.

▾ SunlitRed Hat · 3scaleEPSS 0.28%via CVEORG