high7.5
CVE-2024-38453
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key.
Impact
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.
Affected products
| Product | Affected versions |
|---|---|
| Avalara For Salesforce CPQ App | before 7.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.