CVE-2023-47392 | BDVDB-2026-217592 Detail

Description#

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://gist.github.com/wwwziziyu/d0ae135b8075f6db735d75135254e7a1

Exploit#

No public exploit known

History#

Version 12023-11-22Record published in the CVE List.
Version 22024-08-29Most recent update recorded in the CVE List.