CVE-2024-10653: Changing Information Technology Idexpert

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server.

Affected products

• Changing Information Technology Idexpert: from 2.5, up to and including 2.8
• Changingtec Idexpert: from 2.6.1, up to and including 2.8.1.240620

Published 2024-11-01. Last modified 2026-06-17.