CVE-2023-2544

Authorization bypass vulnerability in UPV PEIX, affecting the component "pdfcurrinew.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users...

CVE-2023-2544 Authorization Bypass on UPV PEIX

Authorization bypass vulnerability in UPV PEIX, affecting the component "pdfcurrinew.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users...

CVE-2023-2544

Summary: CVE-2023-2544 is an authorization bypass vulnerability in UPV PEIX, specifically in the component pdf_curri_new.php. An authenticated user can exploit a POST request by altering the ID parameter to access other users’ stored information. Industry entries (NVD, CVE list, CNNVD, etc.) corr...