CVE-2023-47392
CVE-2023-47392
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
22 Nov 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.
Affected products
n/a · n/a