CVE-2023-2702

High

Published: 23/05/2023(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2023-2702 vulnerability in Finex Media Competition Management System allows authorization bypass through a user-controlled key, leading to authentication abuse.

Risk Assessment

The organization may be exposed to unauthorized access to the system, potentially resulting in serious data security breaches.

Recommendation

It is recommended to update the system to a version after 23.07 to mitigate this vulnerability and conduct a security audit.

Other vulnerabilities in Competition Management System

CVE-2023-2703High
A vulnerability in the Finex Media Competition Management System allows unauthorized actors to access private personal information and collect data provided by users.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS