Opensuse

Travel Support Program

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-46163

Exploit
  • EPSS 0.54%
  • Published 10.01.2023 21:15:12
  • Last modified 21.11.2024 07:30:14

Travel support program is a rails app to support the travel support program of openSUSE (TSP). Sensitive user data (bank account details, password Hash) can be extracted via Ransack query injection. Every deployment of travel-support-program below th...