CVE-2023-27376 in IDWeb

Sumário

de MITRE • 25/10/2023

Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: The Missing Link Australia (TML)
• Reservar: 01/03/2023
• Divulgação: 25/10/2023
• Moderação: aceite
• Entrada: VDB-243375
• CPE: pronto
• CWE: CWE-306 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00695
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-27376
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-27376
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-27376/