VULNERABILITY INTELLIGENCE

CVE-2023-24599

CVSS score4.3 MEDIUM

EPSS probability0.50%

CISA KEVNot currently listed

Published2023-05-29

Last modified2026-06-17

Description

OX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of arbitrary users via conflicting ID numbers, aka "ID confusion."