Beveiligingsadvies

CVE-2023-2544

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-10-03 13:03:13

Laatst bijgewerkt 2024-09-19 19:50:13

Toegewezen door INCIBE

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Authorization bypass vulnerability in UPV PEIX, affecting the component "pdf_curri_new.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users.

← Alle CVE's bekijken Bekijk op cve.org ↗