h1thub

1 exploit Active since Sep 2024
CVE-2024-46635 NOMISEC MEDIUM WRITEUP
INROAD <v20240206 - Info Disclosure
An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter.
1 stars
CVSS 5.9