Control iD RHiD 23.3.19.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:controlid:rhid:23.3.19.0:*:*:*:*:*:*:*

part: a version: 23.3.19.0 update: *

VendorControlid (8e8c7d6a-e5da-5e41-96a9-7818c8fa5347)
ProductRhid (3496075f-9c4f-573c-94a1-d98898744acd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2524 vulnerable 2026-06-08 06:02:42.470099 Control iD RHiD direct request
MEDIUM (6.3)
A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/#/. The manipulation leads to direct request. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-228015. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-05-04T18:31:03.558Z
Updated: 2025-01-29T17:56:58.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2421 vulnerable 2026-06-08 06:02:42.272868 Control iD RHiD department cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0. Affected is an unknown function of the file /v2/#/add/department. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-227718 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-04-29T01:31:04.560Z
Updated: 2025-01-14T16:47:04.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.