CVE-2023-27257

Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student information by unauthenticated attackers...

CVE-2023-27257

Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student information by unauthenticated attackers...

CVE-2023-27257 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student information by unauthenticated attackers...

CVE-2023-27257

CVE-2023-27257 affects IDAttend’s IDWeb application (versions 3.1.052 and earlier). The underlying issue is missing authentication in the GetActiveToiletPasses method, allowing unauthenticated attackers to retrieve student information via the affected endpoint (attack vector: network; impact: con...