ERP system vulnerabilities

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated attacker could retrieve repository metadata and files, potentially reconstructing the application's source code.

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated attacker could manipulate parameters, leading to exposure of sensitive information of other users.

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated attacker could upload arbitrary files to a web accessible directory, potentially executing arbitrary code and compromising the system.