Description
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.
Medium · 6.5
CVE-2023-24625
EUVD-2023-28636GHSA-99fr-5jwf-5mf5
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) at…
Published Mar 24, 2023 · Updated Feb 21, 2025 · Assigned by mitre