CVE-2024-49373

Published Oct 22, 2024

Last updated 18 days ago

CVSS medium 4.3

Overview

Description: No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem.
Source: security-advisories@github.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 4.3
Impact score: 1.4
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
security-advisories@github.com: CWE-653

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:nofusscomputing:centurion_erp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6D4A55D5-C672-4ED6-B9F6-A93AFFE1990C",
            "versionEndExcluding": "1.2.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References