CVE-2024-37889

Published June 14th, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

MyFinances is a web application for managing finances. MyFinances has a way to access other customer invoices while signed in as a user. This method allows an actor to access PII and financial information from another account. The vulnerability is fixed in 0.4.6.

TreyWW/MyFinances

MyFinances is a web application that can help you as an individual, or team, manage your finances!

GitHub

158