CVE-2023-26576

IDWeb application versions 3.1.052 and earlier suffer from missing authentication in the SearchStudentsRFID method, enabling unauthenticated attackers to extract sensitive student data. Root cause: inadequate access control on the SearchStudentsRFID endpoint. Impact: exposure of sensitive student...

CVE-2023-26576 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...