Description
The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oz Forensics | face recognition application | < 4.0.8 late 2023 | 4.0.8 late 2023 |