CVE-2023-50872
The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respect…
Published: 2024-04-16 · CVSS: 7.5 · CVSS 3.1
The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respective holder. NOTE: the excellium-services.com web page about this issue mentions "Vendor says that it's not a security issue."
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7