{"id":"CVE-2023-2703","aliases":["EUVD-2023-34167","GHSA-75ph-hrv9-h6f8"],"status":"published","title":"Information Disclosure in Finex Media's Competition Management System","description":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.\n\nThis issue affects Competition Management System: before 23.07.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00565,"percentile":0.47222,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-359","CWE-668"],"published":"2023-05-23T19:19:47Z","modified":"2026-06-17T05:53:14Z","products":[{"vendor":"finex media","product":"competition management system"},{"vendor":"finexmedia","product":"competition_management_system"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-23-0283","tags":["government-resource","broken-link","x_transferred","Third Party Advisory"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0283","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2703"},{"url":"https://github.com/advisories/GHSA-75ph-hrv9-h6f8"}],"sources":{"cve":[{"id":"CVE-2023-2703","title":"Information Disclosure in Finex Media's Competition Management System","description":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.\n\nThis issue affects Competition Management System: before 23.07.","status":"published","published":"2023-05-23T19:19:47.883Z","modified":"2026-05-22T11:16:13.302Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-359"],"updated_at":"2026-11-02T14:35:23.645864Z"}],"euvd":[{"id":"EUVD-2023-34167","description":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.\n\nThis issue affects Competition Management System: before 23.07.","status":"published","published":"2023-05-23T19:19:47Z","modified":"2026-05-22T11:16:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:21:12.869457Z"}],"ghsa":[{"id":"GHSA-75ph-hrv9-h6f8","title":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media...","description":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.This issue affects Competition Management System: before 23.07.\n\n","status":"published","published":"2023-05-23T21:30:18Z","modified":"2024-04-04T04:19:18Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"cwes":["CWE-359","CWE-668"],"updated_at":"2026-11-02T14:56:22.887174Z"}],"nvd":[{"id":"CVE-2023-2703","description":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.\n\nThis issue affects Competition Management System: before 23.07.","status":"published","published":"2023-05-23T20:15:09.817Z","modified":"2026-06-17T05:53:14.4Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-359","CWE-668"],"updated_at":"2026-11-02T14:08:03.200773Z"}]}}