Medium severity4.8NVD Advisory· Published Jul 21, 2022· Updated Jun 17, 2026
CVE-2022-30628
CVE-2022-30628
Description
It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX
Affected products
3- Supersmart.me/Supersmart.me – Walk Throughv5Range: Update to the latest version
- cpe:2.3:a:supersmart:supersmart.me_-_walk_through:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.gov.il/en/Departments/faq/cve_advisoriesnvdThird Party Advisory
News mentions
0No linked articles in our index yet.