What’s Vulnerable › Vulnerabilities
CVE-2023-24625
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-03-24 · updated 2026-06-17
- Weakness: CWE-639
Description
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.
Affected products
References
- https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896
- https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896
- https://www.faveohelpdesk.com/servicedesk/
- https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896
- https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896
- https://www.faveohelpdesk.com/servicedesk/
Get alerted when CVE-2023-24625 or the next vulnerability affects your stack