What’s Vulnerable › Vulnerabilities
CVE-2024-8601: Improper Access Control Vulnerability in TechExcel Back Office Software
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-09 · updated 2026-06-17
- Weakness: CWE-639
Description
This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to unauthorized access to sensitive information belonging to other users.
Affected products
- TechExcel Software Solutions Back Office Software: before 1.0.0 — fixed in 1.0.0
How to fix
Upgrade to a fixed version: TechExcel Software Solutions Back Office Software 1.0.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-8601 or the next vulnerability affects your stack