Описание
The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.
EPSS
Процентиль: 52%
0.00295
Низкий
8.6 High
CVSS3
Дефекты
CWE-425
Связанные уязвимости
CVSS3: 8.6
github
10 месяцев назад
The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.
EPSS
Процентиль: 52%
0.00295
Низкий
8.6 High
CVSS3
Дефекты
CWE-425