Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3qmc-vv7g-wccj

Опубликовано: 26 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

EPSS

Процентиль: 48%
0.0025
Низкий

8.8 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

EPSS

Процентиль: 48%
0.0025
Низкий

8.8 High

CVSS3

Дефекты

CWE-732