CVE-2023-2524

A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/#/. The manipulation leads to direct request. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-228015. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-425

• https://vuldb.com/?ctiid.228015Permissions Required
• https://vuldb.com/?id.228015Permissions Required
• https://vuldb.com/?ctiid.228015Permissions Required
• https://vuldb.com/?id.228015Permissions Required

Published

May 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2523A vulnerability was found in Weaver E-Office 9.5. It has bee…9.8
• CVE-2023-25230A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 all…4.9
• CVE-2023-25231Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Ove…9.8
• CVE-2023-25233Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow …9.8
• CVE-2023-25234Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow …9.8
• CVE-2023-25235Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow …7.5
• CVE-2023-25240An improper SameSite Attribute vulnerability in pimCore v10.…8.8
• CVE-2023-25241bgERP v22.31 was discovered to contain a reflected cross-sit…6.1
• CVE-2023-2526The Easy Google Maps plugin for WordPress is vulnerable to C…5.4
• CVE-2023-25260Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local Fi…7.5
• CVE-2023-25261Certain Stimulsoft GmbH products are affected by: Remote Cod…9.8
• CVE-2023-25262Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulner…7.5