Skip to content
OpenAdvisories
High · 7.5 CVE-2023-26580 EUVD-2023-30375GHSA-qrm9-mm7m-8xgw

Missing Authentication In IDAttend’s IDWeb Application

Published Oct 25, 2023 · Updated Sep 11, 2024 · Assigned by TML

Description

Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers.

Affected products

VendorProductAffectedFixed
IDAttend Pty IDWeb ≤ 3.1.052 —

References