CVE-2023-2544 (published 2023-10-03T13:03:13.218Z)
Authorization bypass vulnerability in UPV PEIX, affecting the component "pdf_curri_new.php". Through a POST request, an authenticated user could change the ID parameter to retrieve all the stored information of other registered users.
Affected products: Vendor: Universitat Politècnica de València (UPV)
Product: UPV PEIX
Versions: 0