Patch Forecast
Amber warning
Patch this week.

CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference…

Risk score
71/100
CVSS
10.0 v3.1
Exploit chance (30 days)
0.4%
Published
13 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 10.0 critical
  • Remotely exploitable without logging in

References

Original description

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

Last activity 13 Oct 2026. Patch Forecast updates every hour.