PT-2023-20062 · Upv Peix · Upv Peix

Germán Planells García + 1 · Publicado 2023-10-03 · Atualizado 2023-10-05 · CVE-2023-2544

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions UPV PEIX (affected versions not specified)

Description The issue allows an authenticated user to bypass authorization and retrieve stored information of other registered users through a POST request by changing the ID parameter in the "pdf curri new.php" component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2023-2544

Produtos afetados

Upv Peix

Referências · 6

• https://t.me/cibsecurity/71508 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1709196547307585710 · Publicação no Twitter
• https://incibe.es/en/incibe-cert/notices/aviso/authorization-bypass-upv-peix · Nota
• https://t.me/cvenotify/59032 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2544 · Nota de Segurança
• https://twitter.com/DMFezzaReedCISA/status/1709240245818908928 · Publicação no Twitter