CVE-2023-27259 (published 2023-10-25T10:17:25.615Z)
Missing authentication in the GetAssignmentsDue      method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student and teacher data by unauthenticated attackers.  
Affected products: Vendor: IDAttend Pty Ltd
Product: IDWeb
Versions: 0