CVE-2023-2703

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-2703
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.This issue affects Competition Management System: before 23.07.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.usom.gov.tr/bildirim/tr-23-0283 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:finexmedia:competition_management_system:*:*:*:*:*:*:*:*
History

No history.

Information

Published : 2023-05-23 20:15

Updated : 2023-08-02 17:15

NVD link : CVE-2023-2703

Mitre link : CVE-2023-2703

CVE.ORG link : CVE-2023-2703

JSON object : View

Products Affected

finexmedia

  • competition_management_system
CWE
CWE-359

Exposure of Private Personal Information to an Unauthorized Actor

CWE-668

Exposure of Resource to Wrong Sphere