Menulux Portal
Monthly
Observable response discrepancy in Menulux Portal (all builds before 20260903211448) enables unauthenticated account footprinting against the portal's login or account-resolution endpoint. By observing measurable differences in server responses - such as distinct HTTP status codes, error messages, or timing - for valid versus invalid account identifiers, an attacker can systematically enumerate existing user accounts. Reported by TR-CERT with no public exploit code or CISA KEV listing identified at time of analysis.
Plaintext password storage in Menulux Portal (CWE-256) exposes embedded credentials to any low-privileged authenticated user over the network. All portal versions prior to build 20260903211448 are affected. Disclosed by TR-CERT; no public exploit code or active exploitation has been identified at time of analysis, though the High CVSS confidentiality rating reflects full credential retrieval capability.
Missing authorization in Menulux Portal allows authenticated low-privileged users to access functionality not constrained by access control lists, resulting in unauthorized information disclosure. Affecting all versions before the timestamp-build 20260903211448, the flaw is rooted in CWE-862 (Missing Authorization) and was reported by TR-CERT, Turkey's national cybersecurity authority. No public exploit or KEV listing exists; the CVSS score of 4.3 (Medium) reflects limited confidentiality impact with no integrity or availability consequences.
Stored cross-site scripting in Menulux Portal (all versions before 20260903211448) allows an authenticated low-privileged user to inject persistent malicious scripts into web pages that execute in the browsers of other users who view the affected content. The scope change (S:C in CVSS) indicates the attack crosses the boundary from the application into victim browsers, enabling session theft, credential harvesting, or UI redirection against any user who views the poisoned content. No public exploit code or active exploitation has been identified at time of analysis; the vulnerability was reported by TR-CERT and a fix has been released.
Observable response discrepancy in Menulux Portal (all builds before 20260903211448) enables unauthenticated account footprinting against the portal's login or account-resolution endpoint. By observing measurable differences in server responses - such as distinct HTTP status codes, error messages, or timing - for valid versus invalid account identifiers, an attacker can systematically enumerate existing user accounts. Reported by TR-CERT with no public exploit code or CISA KEV listing identified at time of analysis.
Plaintext password storage in Menulux Portal (CWE-256) exposes embedded credentials to any low-privileged authenticated user over the network. All portal versions prior to build 20260903211448 are affected. Disclosed by TR-CERT; no public exploit code or active exploitation has been identified at time of analysis, though the High CVSS confidentiality rating reflects full credential retrieval capability.
Missing authorization in Menulux Portal allows authenticated low-privileged users to access functionality not constrained by access control lists, resulting in unauthorized information disclosure. Affecting all versions before the timestamp-build 20260903211448, the flaw is rooted in CWE-862 (Missing Authorization) and was reported by TR-CERT, Turkey's national cybersecurity authority. No public exploit or KEV listing exists; the CVSS score of 4.3 (Medium) reflects limited confidentiality impact with no integrity or availability consequences.
Stored cross-site scripting in Menulux Portal (all versions before 20260903211448) allows an authenticated low-privileged user to inject persistent malicious scripts into web pages that execute in the browsers of other users who view the affected content. The scope change (S:C in CVSS) indicates the attack crosses the boundary from the application into victim browsers, enabling session theft, credential harvesting, or UI redirection against any user who views the poisoned content. No public exploit code or active exploitation has been identified at time of analysis; the vulnerability was reported by TR-CERT and a fix has been released.