CVE-2024-49373

4.3 mediumEPSS 0.4%

Medium (4.3) in nofusscomputing centurion erp. EPSS 0.4% chance of exploitation in the next 30 days.

No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-653
Published: 2024-10-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nofusscomputing:centurion_erp

References

https://github.com/nofusscomputing/centurion_erp/commit/c3a4685200faa060167d4fde86e806dc91eddcae
https://github.com/nofusscomputing/centurion_erp/pull/358
https://github.com/nofusscomputing/centurion_erp/security/advisories/GHSA-5qmx-pr2f-qhj5

Check your stack JSON