CVE-2022-30760

An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive…

published June 9, 2022

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information (final grades, study courses, degrees) by changing the student ID parameter in the HTTP POST request to the FrontControllerSS endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00951 · 60.9th percentile
Published
2022-06-09T15:14Z
EPSS history
Timeline
  • 09 JUN 15:14Z
    An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive…
    cvelistv5