CVE-2023-26580

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306 CWE-552

Affected software

Vendor	Product	Versions
IDAttend Pty Ltd	IDWeb	<= 3.1.052

References

https://www.themissinglink.com.au/security-advisories/cve-2023-26580Third Party Advisory
https://www.themissinglink.com.au/security-advisories/cve-2023-26580Third Party Advisory

Timeline

Published: Oct 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-265819.1Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modificati CVE-2023-265829.1Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or m CVE-2023-265839.1Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or mod CVE-2023-265849.1Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extract CVE-2023-265855.0Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent CVE-2023-265866.5Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticat CVE-2023-265877.8Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation o CVE-2023-265887.5Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The a CVE-2023-265895.5Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of se CVE-2023-26599.8A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown CVE-2023-265905.5A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead t CVE-2023-265912.0Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to poten