medium5.3
CVE-2023-47392
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.
Impact
An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mercedes-Benz | Mercedes Me | through 1.34.0 |