CVE-2023-3529

Rotem Dynamics Rotem CRM up to 20230729 contains an information-exposure issue in the OTP URI Interface, specifically the /LandingPages/api/otp/send?id=[ID]&method=sms endpoint. The vulnerability allows remote initiation and arises from a discrepancy in the handling of this API, with no public ex...