VulnerabilityAnalyzed

CVE-2024-49373

No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software.

MEDIUM 4.3EPSS 0.37%

Does this matter?

Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.

Description

No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem.

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.37% probability · 31th percentile
CISA KEV: Not listed
Weakness: CWE-653
Affected: nofusscomputing/centurion erp
Source: security-advisories@github.com

References

https://github.com/nofusscomputing/centurion_erp/commit/c3a4685200faa060167d4fde86e806dc91eddcaePatch
https://github.com/nofusscomputing/centurion_erp/pull/358Patch
https://github.com/nofusscomputing/centurion_erp/security/advisories/GHSA-5qmx-pr2f-qhj5Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.