Skip to content
OpenAdvisories
High · 7.5 CVE-2023-26576 EUVD-2023-30371GHSA-4f7j-xf8r-8572

Missing Authentication In IDAttend’s IDWeb Application

Published Oct 25, 2023 · Updated Oct 15, 2024 · Assigned by TML

Description

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.

Affected products

VendorProductAffectedFixed
IDAttend Pty IDWeb ≤ 3.1.052 —

References