Authorization Vulnerability in Quick Event Manager Could Allow Exploitation of Incorrectly Configured Access Control Security Levels

CVE-2023-23975

Summary

A missing authorization vulnerability exists in Fullworks Quick Event Manager, which compromises access control security levels. This allows for the exploitation of incorrectly configured permissions, potentially enabling unauthorized users to perform actions reserved for privileged accounts. The issue is found in Quick Event Manager versions from n/a up to 9.7.4 and necessitates prompt attention to ensure that access settings are properly configured to mitigate potential risks.

References