CVE-2023-25913 | HackTesting

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.

Credits

Jony Schats (HackDefense)

Stan Plasmeijer (HackDefense)

Max van der Horst (DIVD)

References

https://csirt.divd.nl/CVE-2023-25913

https://csirt.divd.nl/DIVD-2023-00025