CVE-2023-26580 Missing Authentication In IDAttend’s IDWeb Application

Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers...

CVE-2023-26580

The vulnerability CVE-2023-26580 affects IDAttend’s IDWeb application 3.1.013, allowing unauthenticated arbitrary file read and access to files on the web server. Documented impact specifies unauthenticated access with high confidentiality impact (C: High, I: None, A: None) and network/low comple...