RupeeWeb Trading Platform Insufficient Authorization Vulnerability Allowing Unauthorized Information Modification
Vulnerability
A vulnerability has been identified in the RupeeWeb trading platform, all versions prior to 66.9, due to inadequate authorization controls on certain API endpoints that manage addition and deletion operations. This vulnerability could enable an authenticated remote attacker to alter information associated with other user accounts.
Impact
Exploitation of this vulnerability could result in unauthorized modification of user account information.
Remediation
Users are advised to upgrade RupeeWeb to version 66.9.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.