Tabit
7 CVEs across 1 Tabit products. Browse Tabit vulnerabilities, severities, and proof-of-concept exploits.
Tabit products with known CVEs
Tabit CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-34776 | Medium | 5.5 | 2022-08-22 | Tabit - giftcard stealth. Several APIs on the web system display, without authorization, sensitive information such as health statements, previous bills in a s… |
CVE-2022-34775 | Medium | 6.3 | 2022-08-22 | Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the reservation, a… |
CVE-2022-34774 | Medium | 6.3 | 2022-08-22 | Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email a… |
CVE-2022-34773 | Medium | 4.9 | 2022-08-22 | Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an example of O… |
CVE-2022-34772 | Medium | 4.3 | 2022-08-22 | Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit OTP. One can resend OTP and try loggin… |
CVE-2022-34771 | Medium | 5.5 | 2022-08-22 | Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits behalf to anyone registered on the syst… |
CVE-2022-34770 | Medium | 4.6 | 2022-08-22 | Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive information such as health statements, previ… |