high7.5
CVE-2023-26574
Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthentic…
Impact
Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idattend | Idweb | through 3.1.052 |