3 matches found
CVE-2023-49112
Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" parameter. This endpoint lacks proper access control mechanisms, allowing other authenticated users to read information about applications, even...
6.5CVSS6.3AI score0.00517EPSS
SaveExploits1
CVE-2023-49112
Kiuwan SAST version
6.2AI score0.00517EPSS
SaveExploits1References3
CVE-2023-49112 Insecure Direct Object Reference in Kiuwan SAST
Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" parameter. This endpoint lacks proper access control mechanisms, allowing other authenticated users to read information about applications, even...
0.00517EPSS
SaveExploits1References2
20