CVE-2023-47392: Mercedes-Benz Mercedes Me

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.

Affected products

• Mercedes-Benz Mercedes Me: up to and including 1.34.0

Published 2023-11-22. Last modified 2026-06-17.