Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pv77-9993-vv42

Опубликовано: 24 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

EPSS

Процентиль: 17%
0.00053
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 7.3
nvd
16 дней назад

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

EPSS

Процентиль: 17%
0.00053
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-266