← Back

Selection Portal

selection_portal

Vendor: Endalia • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-35577
1Endalia
1Selection Portal
Jun 17, 2026
Feb 18, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka Commo...Show more
In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka CommonDownload identification number).Show less