CVE-2023-2703

HIGH

Finexmedia Competition Management System - Exposure to Wrong Actor

Title source: rule

Description

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.This issue affects Competition Management System: before 23.07.

References (1)

[Third Party Advisory] https://www.usom.gov.tr/bildirim/tr-23-0283

Scores

CVSS v3 7.5

EPSS 0.0008

EPSS Percentile 24.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-359 CWE-668

Status published

Affected Products (1)

finexmedia/competition_management_system < 23.07

Timeline

Published May 23, 2023

Tracked Since Feb 18, 2026