CVE-2023-6554

CVE-2023-6554: Missing authorisation in TCExam

Vendor Tecnick.com

Product TCExam

Weakness CWE-862 · Missing authorization

Published January 11, 2024

Last update June 20, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers.

Key dates

02Disclosure timeline

January 11, 2024 CVE published

June 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-6554 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2022-0611 Missing Authorization in snipe/snipe-it CVE-2026-9284 WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure CVE-2024-12129 Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update CVE-2024-33925 WordPress Embed Google Fonts plugin <= 3.1.0 - Broken Access Control vulnerability CVE-2024-1710 Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload