Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.00683·Published 2023-05-23·Fixed in 23.07CWE-639
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00565·Published 2023-05-23·Fixed in 23.07CWE-359