Cross Site Scripting Vulnerability in Lost and Found Information System by Lost
CVE-2024-37856

5.4MEDIUM

Key Information:

Vendor

Oretnom23

Status
Lost And Found Information System
Vendor
CVE Published:
29 July 2024

What is CVE-2024-37856?

A Cross Site Scripting vulnerability exists in the Lost and Found Information System version 1.0, enabling remote attackers to exploit user input fields such as first, last, and middle name on the User Profile page. This flaw can lead to privilege escalation, allowing unauthorized users to execute malicious scripts in the context of another user's session, potentially compromising sensitive user data and system integrity.

References

https://www.sourcecodester.com/
http://lost.com
https://packetstormsecurity.com/files/179078/Lost-And-Fou...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.