CVE-2023-38048

Vulnerability Description

A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider). This results in unauthorized access and unauthorized data manipulation.

Vulnerability Details

Published Date

July 09, 2024

Last Modified

November 21, 2024

Source

NVD

CVE-2023-38048

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment