CVE-2024-10651: Changing Information Technology Idexpert

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files.

Affected products

• Changing Information Technology Idexpert: from 2.5, up to and including 2.8

Published 2024-11-01. Last modified 2026-06-17.