Incorrect Access Control Vulnerability in Kashipara Music Management System
CVE-2024-42798

7.6HIGH

Key Information:

Vendor

Kashipara

Status
Music Management System
Vendor
CVE Published:
16 September 2024

What is CVE-2024-42798?

An access control issue was identified in the Kashipara Music Management System version 1.0, specifically within the user management functionalities located at /music/index.php?page=user_list and /music/index.php?page=edit_user. This vulnerability allows attackers with low privileges to manipulate the application and potentially gain control over admin-level access. As a result, unauthorized users may be able to perform administrative tasks, compromising the security and integrity of the management system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.kashipara.com/
https://github.com/takekaramey/CVE_Writeup/blob/main/Kash...

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.