Advisories · Technology
mayswind ezbookkeeping.
Every CVE that names mayswind ezbookkeeping among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header
- mayswind ezbookkeeping
- CWE-348
- CVSS 5.3 Medium
mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint
- mayswind ezBookkeeping
- Broken access control
- CVSS 7.6 High
mayswind ezBookkeeping before 2.0.0 TOTP Replay Attack
- mayswind ezBookkeeping
- Authentication bypass