High severity8.1NVD Advisory· Published Mar 18, 2025· Updated Jun 17, 2026
CVE-2024-44313
CVE-2024-44313
Description
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
tastyigniter/tastyigniterPackagist | < 4.0.0 | 4.0.0 |
Affected products
3cpe:2.3:a:tastyigniter:tastyigniter:3.7.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tastyigniter:tastyigniter:3.7.6:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
4- medium.com/@cnetsec/cve-2024-44313-incorrect-access-control-in-tastyigniter-3-7-6-01a73c548b74nvdExploitWEB
- github.com/advisories/GHSA-gg2f-r4jh-vpmhghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-44313ghsaADVISORY
- github.com/tastyigniter/TastyIgniter/blob/3.x/app/admin/controllers/Orders.phpnvdProductWEB
News mentions
0No linked articles in our index yet.