CVE-2023-33706

SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a…

published November 24, 2023

CVSS
—
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Published
2023-11-24T00:00Z
EPSS history
Timeline
  • 24 NOV 00:00Z
    SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a…
    cvelistv5