{ "id": "CVE-2023-41261", "sourceIdentifier": "cve@mitre.org", "published": "2023-10-12T23:15:11.137", "lastModified": "2023-10-12T23:15:11.137", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results." } ], "metrics": {}, "references": [ { "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md", "source": "cve@mitre.org" } ] }