CVE-2023-6515
8.8 HIGHAuthorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc
Published: 2024-02-08 · Last updated: 2026-05-20
Severity and scoring
- CVSS
- 8.8 HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CWE
- CWE-639
Affected products
| Vendor | Product |
|---|---|
| miateknoloji | mia-med |
Description
Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc. MİA-MED allows Authentication Abuse. This issue affects MİA-MED: before 1.0.7.
Source: NVD
References
Related CVEs
Same vendor
- CVE-2023-6519 — Exposure of Data Element to Wrong Session vulnerability in Mia Technology Inc (7.5 HIGH)
- CVE-2023-6518 — Plaintext Storage of a Password vulnerability in Mia Technology Inc (7.5 HIGH)
- CVE-2023-6517 — Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc (7.5 HIGH)
- CVE-2022-3760 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med (9.8 CRITICAL)
Same CWE
- CVE-2026-12204 — A vulnerability was determined in ShopXO up to 6.7.1 (7.3 HIGH)
- CVE-2026-1291 — The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST AP... (4.3 MEDIUM)
- CVE-2026-54361 — MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow at...
- CVE-2026-54360 — A mass assignment vulnerability exists in MISP’s sharing group creation endpoint
- CVE-2026-54357 — An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify user settings bel...