[CVE-2024-34323] ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (I…

Descripción técnica

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

Puntuación CVSS

Score: 10/10 — Severidad: CRITICAL — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Debilidades (CWE)

CWE-639

Fuente oficial

Publicado en NIST NVD.