Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vpfg-w257-rq9f

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.

An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.

EPSS

Процентиль: 17%
0.00054
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 5.4
nvd
около 1 года назад

An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.

EPSS

Процентиль: 17%
0.00054
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-290