CVE-2026-23844
Vulnerability Description
Whisper Money is a personal finance application. Versions prior to 0.1.5 have an insecure direct object reference vulnerability. A user can update/create account balances in other users' bank accounts. Version 0.1.5 fixes the issue.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-488
Source
NVD
Vendor
whisper-money
Product
whisper-money
Discussion (0)
Add Comment
No comments yet. Be the first!