CVE-2023-38884

An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated remote attacker to…

published November 20, 2023

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated remote attacker to access any student's files by visiting '/assets/studentfiles/<studentId>-<filename>'

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00878 · 58.6th percentile
Published
2023-11-20T00:00Z
EPSS history
Timeline
  • 20 NOV 00:00Z
    An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated remote attacker to…
    cvelistv5