Authentication flaw

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

authentication

flaw

student data

unauthenticated attackers

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.

CPENameOperatorVersion
idweble3.1.052

CPE	Name	Operator	Version
	idweb	le	3.1.052

References

www.themissinglink.com.au/security-advisories/cve-2023-27377