← All advisories

High severity7.5NVD Advisory· Published Jul 3, 2024· Updated Apr 15, 2026

CVE-2024-38453

CVE-2024-38453

Description

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Avalara/Avalara for Salesforce CPQllm-create
Range: <7.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.