CVE-2024-44313
HIGHTastyIgniter < 4.0.0 - Unauthenticated Incorrect Access Control in Orders Invoice Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-44313. PoCs published by chessredoffsec.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2024-44313, an authentication bypass vulnerability in TastyIgniter 3.7.6. The exploit demonstrates unauthorized access to order invoices by sending an unauthenticated HTTP request to a vulnerable endpoint.
Description
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.
Exploits (1)
The repository contains a functional exploit for CVE-2024-44313, an authentication bypass vulnerability in TastyIgniter 3.7.6. The exploit demonstrates unauthorized access to order invoices by sending an unauthenticated HTTP request to a vulnerable endpoint.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N