go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

Kaifa Technology WebITR - Error Message Leakage

TVN ID TVN-202312020
CVE ID CVE-2023-48393
CVSS 4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products WebITR 2_1_0_23
Description Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial sensitive system information from error message.
Solution Update to the latest version
Credit Cyku(DEVCORE)
Public Date 2023-12-15
Top