CVE-2023-1779: Mbconnectline MBCONNECT24

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.

Affected products

• Mbconnectline MBCONNECT24: up to and including 2.13.3
• Mbconnectline MYMBCONNECT24: up to and including 2.13.3

Published 2023-06-06. Last modified 2026-06-17.