CVE-2023-2713

Critical

Published: 20/05/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in the Rental Module developed by a third party for Ideasoft's e-commerce platform allows authorization bypass through a user-controlled key, leading to authentication abuse.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially resulting in data theft or other abuses.

Recommendation

It is recommended to update the Rental Module to a version after 23.05.15 to mitigate this vulnerability.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15.