CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-2703 – Information Disclosure in Finex Media's Competition Management System
https://notcve.org/view.php?id=CVE-2023-2703
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.This issue affects Competition Management System: before 23.07. • https://www.usom.gov.tr/bildirim/tr-23-0283 • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-2702 – IDOR in Finex Media's Competition Management System
https://notcve.org/view.php?id=CVE-2023-2702
Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07. • https://www.usom.gov.tr/bildirim/tr-23-0283 • CWE-639: Authorization Bypass Through User-Controlled Key •