Authorization Bypass in SourceCodester Employee Task Management System

CVE-2024-2576

Summary

A serious vulnerability has been identified in the SourceCodester Employee Task Management System 1.0, specifically affecting the /update-admin.php file. The vulnerability allows for an authorization bypass via manipulation of the 'admin_id' argument, enabling unauthorized users to access admin functionalities. This security flaw permits remote attackers to exploit the system without needing physical access, raising significant concerns for data integrity and privacy. Publicly disclosed exploits mean that this vulnerability can be quickly utilized by malicious parties, making immediate attention and remediation critical for affected organizations. For more details, refer to the VDB-257079 entry and the Github Exploit Guide.

References