CVE-2023-2544 — Authorization Bypass on UPV PEIX

CVE-2023-2544

Authorization Bypass on UPV PEIX PUBLISHED

Description (CNA)

Authorization bypass vulnerability in UPV PEIX, affecting the component "pdf_curri_new.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users.

Affected (CNA)

Vendor / product	Versions
Universitat Politècnica de València (UPV) / UPV PEIX	affected 0 through all versions

CWE

CWE-639

References

https://www.incibe.es/en/incibe-cert/notices/aviso/authorization-bypass-upv-peix

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/authorization-bypass-upv-peix

CISA-ADP

No English description supplied.

No references supplied.