Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.

What to know

What it is

A critical vulnerability, with a CVSS score of 9.8, allows unauthenticated privilege escalation in SMS Alert Order Notifications up to version 4.0.2. An attacker could exploit this to gain high privileges, including the ability to read, modify, or delete sensitive data, and potentially take control of the system.

Affected

{'products': ['SMS Alert Order Notifications'], 'packages': [], 'versions': ['<= 4.0.2']}

Fix

Check the linked advisory for a fix, as none is provided in this record.

Exploitation

No known exploitation