Medium severity6.5NVD Advisory· Published Apr 5, 2023· Updated Jun 17, 2026
CVE-2023-0967
CVE-2023-0967
Description
Bhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of other application users and data that should only be viewed by the administrator. This is possible because the application is vulnerable to IDOR, it does not properly validate user permissions with respect to certain actions the user can perform.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Bhima/Bhimadescription
- Range: =1.27.0
Patches
Vulnerability mechanics
References
1- fluidattacks.com/advisories/ingrosso/nvdExploit
News mentions
0No linked articles in our index yet.