Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0349

Опубликовано: 09 янв. 2024
Источник: nvd
CVSS3: 3.7
CVSS3: 5.3
CVSS2: 2.6
EPSS Низкий

Описание

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-250117 was assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00048
Низкий

3.7 Low

CVSS3

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-614

Связанные уязвимости

CVSS3: 3.7
github
около 2 лет назад

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-250117 was assigned to this vulnerability.

EPSS

Процентиль: 15%
0.00048
Низкий

3.7 Low

CVSS3

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-614