CVE-2022-23173

CVE-2022-23173 describes an IDOR-type flaw in a web application (notably referenced with Priority Software Priority) where an attacker who can access the login/demo UI can alter the prog step parameter from 0 to 1 or higher, thereby gaining access to functions that should be restricted by privile...

CVE-2022-23172

The CVE-2022-23172 entry describes a user-enumeration via the password-reset workflow: an attacker can trigger the "Forgot my password" flow and learn which usernames exist based on the system’s response. Connected documents mention specific contexts (e.g., Priority Software Priority ERP) where a...