Every CVESearch/Get API key

CVE-2024-7488

Business Logic Error in RestApp Inc.'s Online Ordering System

5.3 Medium

CVE-2024-7488 is a medium vulnerability (CVSS 5.3) in Order Up Online Ordering System, published December 4, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 22nd percentile. No source names a fixed version.

What does this mean?
Severity
5.3 MediumCVSS 3.1, CVE List
Exploit chance
0.29%EPSS, 22nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks.

This issue affects Online Ordering System: 8.2.1.

NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.29%Up 0.3 points since Dec 5, 2024
90%50%10%1%

Affected products

What each source reports

CVE List Score used5.3

Business Logic Error in RestApp Inc.'s Online Ordering System

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks.

This issue affects Online Ordering System: 8.2.1.

NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1.

Record
CVE-2024-7488
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-190, CWE-1284, CWE-190
Updated
2026-11-02
EUVDEUVD-2024-488475.3

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks.

This issue affects Online Ordering System: 8.2.1.

NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1.

Record
EUVD-2024-48847
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-j3h5-q35j-p5vv5.3

Improper Input Validation vulnerability in RestApp Inc. Online Ordering System allows Integer...

Improper Input Validation vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks.This issue affects Online Ordering System: through 04.12.2024.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Record
GHSA-j3h5-q35j-p5vv
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-20, CWE-190
Updated
2026-11-02
NVD5.3

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks.

This issue affects Online Ordering System: 8.2.1.

NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1.

Record
CVE-2024-7488
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-190, CWE-1284
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open