Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-44313
8.1
HIGHCVSS v3
Published
March 18, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.
tastyigniter/TastyIgniter
GitHub:fire: Powerful, yet easy to use, open-source online ordering, table reservation and management system for restaurants
GitHub:fire: Powerful, yet easy to use, open-source online ordering, table reservation and management system for restaurants= 3.7.6, < 4.0.0NVD