CVE-2023-27376

Missing Authentication In IDAttend’s IDWeb Application

Discovered by Melodi Dey on behalf of The Missing Link Security

Vulnerability Details

Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.013 allows extraction sensitive student data by unauthenticated attackers.

Affected Versions

Discovered in: 3.1.013

Fixed Versions

Fixed in: 3.1.053