What’s Vulnerable › Vulnerabilities

CVE-2023-47392

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-22 · updated 2026-06-17
• Weakness: CWE-200

Description

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.

Affected products

• Mercedes-Benz Mercedes Me: through 1.34.0

References

• https://gist.github.com/wwwziziyu/d0ae135b8075f6db735d75135254e7a1
• https://gist.github.com/wwwziziyu/d0ae135b8075f6db735d75135254e7a1

Get alerted when CVE-2023-47392 or the next vulnerability affects your stack