CVE-2023-45893 in Floorsight Customer Portal

Riassunto

di MITRE • 02/01/2024

An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 16/10/2023
• Divulgazione: 02/01/2024
• Moderazione: accettato
• Voce: VDB-249541
• CPE: pronto
• CWE: CWE-99 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00578
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-45893
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-45893
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-45893/