Cross-Site Request Forgery Vulnerability in SourceCodester Employee and Visitor Gate Pass Logging System
CVE-2024-6649

6.5MEDIUM

Key Information:

Vendor

Oretnom23

Status
Employee And Visitor Gate Pass Logging System
Vendor
CVE Published:
10 July 2024

What is CVE-2024-6649?

A cross-site request forgery (CSRF) vulnerability exists in the save_users function of the Users.php file in the SourceCodester Employee and Visitor Gate Pass Logging System version 1.0. This flaw can be exploited remotely, allowing attackers to manipulate requests without the user's consent. The vulnerability poses significant risks as it can lead to unauthorized user actions and potentially compromise sensitive data. The exploit has already been disclosed publicly, raising the urgency for affected users to take preventive measures.

References

https://vuldb.com/?id.271057
https://vuldb.com/?ctiid.271057
https://vuldb.com/?submit.370663

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.