Lucene search

K
cvelistMitreCVELIST:CVE-2024-23747
HistoryJan 29, 2024 - 12:00 a.m.

CVE-2024-23747

2024-01-2900:00:00
mitre
www.cve.org
3
moderna sistemas
idor vulnerability
user data access
medical information

EPSS

0.001

Percentile

36.0%

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability resides in the system’s handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter, an attacker can gain access to sensitive medical information.

EPSS

0.001

Percentile

36.0%

Related for CVELIST:CVE-2024-23747