CVE-2024-49373

Medium

No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user…

GitHub_M·CWE-653·Published 2024-10-22

CVSS

4.3

EPSS

0.00

KEV

Exploits

cve.orgen

232 chars

No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem.

NVDen

232 chars

NVDes

279 chars

No Fuss Computing Centurion ERP es un software de planificación de recursos empresariales (ERP) de código abierto. Antes de la versión 1.2.1, un usuario autenticado podía ver proyectos dentro de organizaciones de las que no formaba parte. La versión 1.2.1 soluciona el problema.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	4.1	—	—	CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	4.1	—	—	CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	4.1	0.5	3.6	CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N