SourceCodester Lost and Found Information System access control

CVE-2023-3018

Summary

A vulnerability has been identified in the SourceCodester Lost and Found Information System 1.0 that allows for improper access controls within the application. This weakness can be exploited remotely, providing malicious users with the ability to gain unauthorized access to sensitive functionalities within the system. The vulnerability resides in the administrative interface, specifically affecting the /admin/?page=user/list endpoint, where inadequate permissions may expose user data and administrative actions. Given that the exploit has been publicly disclosed, organizations using this version of the Lost and Found Information System should take immediate measures to secure their systems.

References