CVE-2020-35577
In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing …
Published: 2021-02-18 · CVSS: Unscored
In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka CommonDownload identification number).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7