Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rgw7-rhh8-mgf9

Опубликовано: 24 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.

EPSS

Процентиль: 12%
0.00039
Низкий

8 High

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 8
nvd
10 месяцев назад

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.

EPSS

Процентиль: 12%
0.00039
Низкий

8 High

CVSS3

Дефекты

CWE-639