CVE-2023-26580 — Missing Authentication In IDAttend’s IDWeb Application

CVE-2023-26580

Missing Authentication In IDAttend’s IDWeb Application PUBLISHED

Description (CNA)

Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers.

Affected (CNA)

Vendor / product	Versions
IDAttend Pty Ltd / IDWeb	affected 0 through 3.1.052

CWE

CWE-306, CWE-552

References

https://www.themissinglink.com.au/security-advisories/cve-2023-26580

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2023-26580

CISA-ADP

No English description supplied.

No references supplied.