Description
Authorization bypass vulnerability in UPV PEIX, affecting the component "pdf_curri_new.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Universitat Politècnica de València (UPV) | UPV PEIX | ≤ all versions | — |