CVE-2023-2703: Information Disclosure in Finex Media's Competition Management System

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-23 · updated 2026-06-17
Weakness: CWE-359

Description

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users. This issue affects Competition Management System: before 23.07.

Affected products

Finex Media Competition Management System: before 23.07 — fixed in 23.07

How to fix

Upgrade to a fixed version: Finex Media Competition Management System 23.07. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0283
https://www.usom.gov.tr/bildirim/tr-23-0283
https://www.usom.gov.tr/bildirim/tr-23-0283

Get alerted when CVE-2023-2703 or the next vulnerability affects your stack