CVE-2022-30628 - Supersmart.me – Walk Through access to business information without authentication

MEDIUM

Supersmart.me – Walk Through access to business information without authentication

Published Jul 21, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.18%

It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX

Vendor Supersmart.me Product Supersmart.me – Walk Through Default
unknown
Affected
- ≥ Update to the latest version, < Update to the latest version*

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Supersmart.me	Supersmart.me – Walk Through	unknown	Affected ≥ Update to the latest version, < Update to the latest version*

Vendor solution

Update to the latest version

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52459		Advisory
https://www.gov.il/en/Departments/faq/cve_advisories		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner INCD

Published Jul 21, 2022

Updated Sep 16, 2024

Reserved May 12, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner INCD

Published Jul 21, 2022

Updated Sep 16, 2024

GitHub

No data