Threats tagged 'ghsa-868g-vqrm-6v47'

An Insecure Direct Object Reference (IDOR) vulnerability affects Hotel Booking versions up to and including 3.8. This flaw allows an authenticated user with limited privileges to access subscriber data directly without proper authorization checks. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily on confidentiality.