medium5.3
CVE-2023-26579
Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers.
Impact
Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idattend | Idweb | Version 3.1.013 |