CVE-2023-28901 — Trip Data Disclosure from Backend
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and m…
Published: 2024-01-18 · CVSS: 5.3 · CVSS 3.1
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7