Authentication flaw

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

authentication

student data extraction

unauthenticated attackers

idweb application 3.1.052

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.

CPENameOperatorVersion
idweble3.1.052

CPE	Name	Operator	Version
	idweb	le	3.1.052

References

www.themissinglink.com.au/security-advisories/cve-2023-26570