Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2022-34774

Tabit - Arbitrary account modification

Description

Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover (the mail can be used to reset password).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tabit Tabit

  • 3.27.0 to < 3.27.0*affected

References