Mayswind Ezbookkeeping vulnerabilities
- mayswind ezbookkeepingezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header5.3 Medium
- mayswind ezbookkeepingmayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint5.3 Medium
- mayswind ezbookkeepingmayswind ezBookkeeping before 2.0.0 TOTP Replay Attack7.6 High
- mayswind ezbookkeepingmayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and...6.5 Medium
- mayswind ezbookkeepingMaysWind ezBookkeeping has Improper Privilege Management9.8 Critical
- mayswind ezbookkeepingMissing rate limit in MaysWind ezBookkeeping6.3 Medium