Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Finex Media Component: Competition Management System Clear all filters
TI-2023-02531 CVE-2023-2703 · GHSA-75ph-hrv9-h6f8

Information Disclosure in Finex Media's Competition Management System

Priority MEDIUM 40

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00565 Published 2023-05-23 Fixed in 23.07 CWE-359
TI-2023-02530 CVE-2023-2702 · GHSA-9h8x-p9pv-89vv

IDOR in Finex Media's Competition Management System

Priority MEDIUM 41

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00683 Published 2023-05-23 Fixed in 23.07 CWE-639