Description
Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDAttend Pty | IDWeb | ≤ 3.1.052 | — |
Medium · 5.3
CVE-2023-26579
EUVD-2023-30374GHSA-fjcg-2rqh-mpj3
Missing Authentication In IDAttend’s IDWeb Application
Published Oct 25, 2023 · Updated Sep 11, 2024 · Assigned by TML