Indico vulnerabilities

1 known vulnerability in Indico from CERN. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Indico: Insertion of Sensitive Information Into Sent Data

  CVE-2024-50633Jan 16, 2025CERN

  A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally l