nvd-json-data-feeds/CVE-2023/CVE-2023-458xx/CVE-2023-45893.json

{
  "id": "CVE-2023-45893",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-01-02T21:15:09.630",
  "lastModified": "2024-01-03T13:48:00.677",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information."
    },
    {
      "lang": "es",
      "value": "Una referencia de objeto indirecto (IDOR) en las p\u00e1ginas Order y Invoice de Floorsight Customer Portal Q3 2023 permite a un atacante remoto no autenticado ver informaci\u00f3n confidencial del cliente."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45893.md",
      "source": "cve@mitre.org"
    }
  ]
}