CVE-2023-28900 (published 2024-01-18T16:23:07.819Z)
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.
Affected products: Vendor: Škoda Auto
Product: Škoda Connect
Versions: 0