high7.5
CVE-2023-26571
Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated…
Impact
Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idattend | Idweb | through 3.1.052 |