Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vc4g-xc77-7x3q

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's information.

An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's information.

EPSS

Процентиль: 10%
0.00036
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
около 1 года назад

An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's information.

EPSS

Процентиль: 10%
0.00036
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639