Medium severity5.0NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026
CVE-2023-3290
CVE-2023-3290
Description
A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results in unauthorized data manipulation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- customers/customersdescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.