Online Booking System
Approved changes feed: RSS · Atom
cpe:2.3:a:spicejet:online_booking_system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Spicejet (7fa56cf1-9189-5002-9449-e3ce5ab3e1be) |
|---|---|
| Product | Online Booking System (a40bc610-4d37-5d76-bef6-9d349c9987fb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6376 |
vulnerable | 2026-06-08 08:07:04.714529 |
Missing authentication for critical function in SpiceJet Online Booking System
A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification mechanisms. This results in exposure of extensive personal, travel, and booking metadata to any unauthenticated user who can obtain or guess those basic inputs. The issue arises from improper access control on a sensitive data retrieval function.
Published: 2026-04-23T20:10:19.689Z
Updated: 2026-04-24T13:52:43.538Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6375 |
vulnerable | 2026-06-08 08:07:04.714085 |
Authorization bypass through User-Controlled key in SpiceJet Online Booking System
A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without any access controls. Because PNR identifiers follow a predictable pattern, an attacker could systematically enumerate valid records and obtain associated passenger names. This flaw stems from missing authorization checks on an endpoint intended for authenticated profile access.
Published: 2026-04-23T20:07:23.930Z
Updated: 2026-04-24T18:19:59.492Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.