PT-2023-32937 · Sourcecodester · Sourcecodester Lost/Found Information System
Published
2023-12-20
·
Updated
2023-12-20
·
CVE-2023-977966
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
SourceCodester Lost and Found Information System version 1.0
Description
A critical issue has been found, affecting the /admin/?page=user/list file, which leads to improper access controls. The attack can be initiated remotely.
Recommendations
For SourceCodester Lost and Found Information System version 1.0, consider restricting access to the /admin/?page=user/list endpoint until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sourcecodester Lost/Found Information System