CVE-2023-33706 (published 2023-11-24T00:00:00)
SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a