Unrated severityNVD Advisory· Published Aug 22, 2022· Updated Sep 17, 2024
Tabit - Arbitrary account modification
CVE-2022-34774
Description
Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover (the mail can be used to reset password).
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.gov.il/en/departments/faq/cve_advisoriesmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.