CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through <= 1.3.0.
Explanation of Vulnerability in Simple Terms
The E-Invoice App Malaysia versions 1.3.0 and earlier expose sensitive information through improper access controls. An attacker on the network can read confidential data without authentication or user interaction. The vulnerability affects the application's information disclosure mechanisms, potentially exposing invoice or user data to unauthorized parties.
What an attacker can do
Read sensitive information from the application without logging in.
Potential impact on your site
Confidential invoice or user data may be exposed to anyone with network access to the application.
Conditions required to exploit
Network access to the application; no authentication required.
Key dates
External resources
