Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Stampit_web | Deutsche_post | 1.0 (including) | 1.0 (including) |