Authorization

2023-10-0314:15:00

PRIOn knowledge base

www.prio-n.com

authorization bypass

upv peix

pdf

post request

authenticated user

id parameter

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

JSON

Authorization bypass vulnerability in UPV PEIX, affecting the component “pdf_curri_new.php”. Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users.

References

www.incibe.es/en/incibe-cert/notices/aviso/authorization-bypass-upv-peix