medium6.5
CVE-2023-24625
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.
Impact
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ladybirdweb | Faveo Servicedesk | Version 5.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896
- https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896
- https://www.faveohelpdesk.com/servicedesk/
- https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896
- https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896
- https://www.faveohelpdesk.com/servicedesk/