CVE-2023-4972

Critical

Published: 14/09/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The vulnerability in Yepas Digital Yepas related to incorrect use of privileged APIs allows for collecting data provided by users. This issue affects versions before 1.0.1.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to user data, posing a serious threat to privacy and information security within the organization.

Recommendation

It is recommended to update to version 1.0.1 or later to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users. This issue affects Digital Yepas: before 1.0.1.