Skip to content
Threat Feed
Subscribe

Product

ERP CRM

1 brief RSS
high advisory

IDURAR ERP CRM Authentication Bypass via Improper Access Control in Password Update

IDURAR ERP CRM contains an authentication flaw in the updatePassword controller that allows any authenticated administrator to change the password of any other account, facilitating unauthorized account takeover.

ERP CRM
1t 1c