Description (CNA)
No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| nofusscomputing / centurion_erp | affected < 1.2.1 |
CWE
CWE-653
References
- https://github.com/nofusscomputing/centurion_erp/security/advisories/GHSA-5qmx-pr2f-qhj5
- https://github.com/nofusscomputing/centurion_erp/pull/358
- https://github.com/nofusscomputing/centurion_erp/commit/c3a4685200faa060167d4fde86e806dc91eddcae
ADP enrichment
No English description supplied.
No references supplied.