CVE-2023-2703

High

Published: 23/05/2023(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in the Finex Media Competition Management System allows unauthorized actors to access private personal information and collect data provided by users.

Risk Assessment

Exposure of sensitive personal information may lead to serious privacy breaches and loss of user trust.

Recommendation

It is recommended to update the competition management system to a version after 23.07 to mitigate this vulnerability.

Other vulnerabilities in Competition Management System

CVE-2023-2702High
CVE-2023-2702 vulnerability in Finex Media Competition Management System allows authorization bypass through a user-controlled key, leading to authentication abuse.

Original NVD description (English source)

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users. This issue affects Competition Management System: before 23.07.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS