Authorization Vulnerability in Quick Event Manager Could Allow Exploitation of Incorrectly Configured Access Control Security Levels
CVE-2023-23975
5.3MEDIUM
What is CVE-2023-23975?
A missing authorization vulnerability exists in Fullworks Quick Event Manager, which compromises access control security levels. This allows for the exploitation of incorrectly configured permissions, potentially enabling unauthorized users to perform actions reserved for privileged accounts. The issue is found in Quick Event Manager versions from n/a up to 9.7.4 and necessitates prompt attention to ensure that access settings are properly configured to mitigate potential risks.
Affected Version(s)
Quick Event Manager <= 9.7.4