High severity7.5NVD Advisory· Published Jul 3, 2024· Updated Apr 15, 2026
CVE-2024-38453
CVE-2024-38453
Description
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.