CodeAstro POS and Inventory Management System User Creation register_account access control
CVE-2023-6773

8.8HIGH

Key Information:

Vendor: CodeAstro
Status: POS and Inventory Management System
Vendor: CVE Published:; 13 December 2023

What is CVE-2023-6773?

A significant vulnerability exists within the CodeAstro POS and Inventory Management System 1.0, specifically in the User Creation Handler component found in the file /accounts_con/register_account. This vulnerability arises from improper access controls when manipulating the account_type argument with the input 'Admin,' enabling unauthorized access. As exploitation can occur remotely, and given that the exploit has been publicly disclosed, there is a heightened risk for affected systems. Adopting immediate protective measures is crucial to safeguard sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch