Ladybirdweb

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Ladybirdweb records in CISA KEV

No Ladybirdweb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Faveo Servicedesk · all components

TI-2023-10232 CVE-2023-24625 · GHSA-99fr-5jwf-5mf5

LOW 31

Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01084 Published 2023-03-24 No fix listed CWE-639