CVE-2020-23284

7.5 highEPSS 1.0%

High (7.5) in mv idce. EPSS 1.0% chance of exploitation in the next 30 days.

Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2021-07-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mv:idce

References

https://github.com/ifmacedo/mconnect/blob/main/sensitiveDataExposure
https://github.com/ifmacedo/mconnect/blob/main/sensitiveDataExposure

Check your stack JSON