Idweb · Idweb · CVE-2023-26571
**Name of the Vulnerable Software and Affected Versions**
IDWeb application versions 3.1.052 and earlier
**Description**
The issue concerns missing authentication in the `SetStudentNotes` method, allowing unauthenticated attackers to modify student data.
**Recommendations**
For IDWeb application versions 3.1.052 and earlier, update to a version that includes proper authentication for the `SetStudentNotes` method to prevent unauthorized modification of student data.
As a temporary workaround, consider restricting access to the `SetStudentNotes` method until a patch is available.