An issue was discovered in OPC cardsystems Webapp Aufwertung 2.1.0. The reference assigned to transactions can be reused. When completing a payment, the first or all transactions with the same reference are completed, depending on timing. This can be used to transfer more money onto employee cards than is paid.
History

Wed, 26 Mar 2025 20:15:00 +0000

Type Values Removed Values Added
Description An issue was discovered in OPC cardsystems Webapp Aufwertung 2.1.0. The reference assigned to transactions can be reused. When completing a payment, the first or all transactions with the same reference are completed, depending on timing. This can be used to transfer more money onto employee cards than is paid.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-03-26T00:00:00.000Z

Updated: 2025-03-26T20:01:57.120Z

Reserved: 2025-03-16T00:00:00.000Z

Link: CVE-2025-30073

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-03-26T20:15:22.837

Modified: 2025-03-26T20:15:22.837

Link: CVE-2025-30073

cve-icon Redhat

No data.