CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-26580
High (7.5) in idattend idweb. EPSS 0.8% chance of exploitation in the next 30 days.
Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-306, CWE-552
- Published
- Modified
- Record from
- the NVD, synced
Affected
- idattend:idweb