Critical severity9.8NVD Advisory· Published Dec 15, 2023· Updated Jun 17, 2026
CVE-2023-48392
CVE-2023-48392
Description
Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2_1_0_19
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-7622-57e5f-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.