Cross-Site Request Forgery Vulnerability in Medicine Tracker System 1.0

CVE-2024-7226

Summary

A cross-site request forgery (CSRF) vulnerability has been identified in the SourceCodester Medicine Tracker System version 1.0. This flaw resides within the Password Change Handler component found in the file /classes/Users.php?f=save_user. This vulnerability allows attackers to manipulate requests remotely, potentially compromising user accounts. Since the exploit has been publicly disclosed, it poses a significant risk to the security of the application and its users. Organizations using this system should take immediate action to assess and mitigate the risks associated with this vulnerability to protect sensitive information.

References