Description
An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request.
Medium · 5.4
CVE-2023-30059
EUVD-2023-34492GHSA-3gwj-2mcq-r22x
An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation…
Published May 12, 2026 · Updated May 13, 2026 · Assigned by mitre