A AegiFlow
MEDIUMCVSS 5.3

CVE-2024-9671

CVE-2024-9671 updated by NVD

Modified
2026-11-06
Sources
nvd

Summary

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.