CVE-2023-27258

Missing Authentication In IDAttend’s IDWeb Application

Discovered by Melodi Dey on behalf of The Missing Link Security

Vulnerability Details

Missing authentication in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.013 allows extraction sensitive student and teacher data by unauthenticated attackers.

Affected Versions

Discovered in: 3.1.013

Fixed Versions

Fixed in: 3.1.053