CVE-2024-9671

No fix known EPSS <1%CVSS 5.3

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.

Published 2024-10-09 · CVE record · OSV

Products: Red Hat 3scale API Management Platform 2