CVE-2023-2544

Publication date

2023-10-03 13:03:13

Family

INCIBE

State

PUBLISHED

Description

Authorization bypass vulnerability in UPV PEIX, affecting the component "pdf_curri_new.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users.