CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Retrieve Embedded Sensitive Data.This issue affects Hesabfa Accounting: from n/a through <= 2.2.5.
Explanation of Vulnerability in Simple Terms
Hesabfa Accounting versions 2.2.5 and earlier expose sensitive information through improper access controls. An unauthenticated attacker on the network can retrieve confidential data without user interaction. The vulnerability affects all versions from release through 2.2.5. Update to a version newer than 2.2.5 to remediate.
What an attacker can do
Read sensitive information from the application without authentication.
Potential impact on your site
Confidential business or user data may be exposed to unauthorized parties.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
