CVE-2023-38884 (published 2023-11-20T00:00:00)
An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated remote attacker to access any student's files by visiting '/assets/studentfiles/<studentId>-<filename>'
Affected products: Vendor: n/a
Product: n/a
Versions: n/a