CVE-2023-26575 (published 2023-10-25T09:37:36.185Z)
Missing authentication in the SearchStudentsStaff  method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student and teacher data by unauthenticated attackers. 
Affected products: Vendor: IDAttend Pty Ltd
Product: IDWeb
Versions: 0