Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-37889

MyFinances Allows Unauthorized Access to Other Customer Data

Description

MyFinances is a web application for managing finances. MyFinances has a way to access other customer invoices while signed in as a user. This method allows an actor to access PII and financial information from another account. The vulnerability is fixed in 0.4.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TreyWW MyFinances

  • < 0.4.6affected

References