CVE-2023-1460

Опубликовано: 17 мар. 2023

Источник: nvd

CVSS3: 6.5

CVSS3: 9.8

CVSS2: 6.4

EPSS Низкий

Описание

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability.

Ссылки

https://vuldb.com/?ctiid.223305
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?id.223305
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?ctiid.223305
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?id.223305
Permissions Required
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00054

Низкий

6.5 Medium

CVSS3

9.8 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-c3px-mgg3-7j37

CVSS3: 9.8

github

почти 3 года назад

EPSS

Процентиль: 17%

0.00054

Низкий

6.5 Medium

CVSS3

9.8 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-287