Description (CNA)
CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CodeLit / CourseLit | affected 0 before 0.57.5 |
CWE
CWE-472
References
- https://github.com/codelitdev/courselit/pull/574/commits/5e11094df938e08485d0ab8aec2722c237ba0496
- https://github.com/codelitdev/courselit/releases/tag/v0.57.5
ADP enrichment
No English description supplied.
No references supplied.