PT-2024-21012 · Unknown · Kishor-23 Food Waste Management System

Rjavenido22 · Published 2024-03-17 · Updated 2025-05-07 · CVE-2024-2557

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions kishor-23 Food Waste Management System version 1.0

Description A critical issue has been found, affecting unknown code in the /admin/admin.php file, leading to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond.

Recommendations For kishor-23 Food Waste Management System version 1.0, as a temporary workaround, consider restricting access to the /admin/admin.php file until a patch is available. Avoid using this file for authorization purposes until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Incorrect Authorization

Improper Authorization

Weakness Enumeration

CWE-863

CWE-285

Related Identifiers

CVE-2024-2557

Affected Products

Kishor-23 Food Waste Management System

References · 8

• 🔥 https://github.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-2557 · Security Note
• https://osv.dev/vulnerability/CVE-2024-2557 · Vendor Advisory
• https://vuldb.com/?id.257056 · Note
• https://t.me/cvenotify/74057 · Telegram Post
• https://t.me/cvenotify/121220 · Telegram Post
• https://vuldb.com/?ctiid.257056 · Note
• https://twitter.com/CVEnew/status/1769282373252706804 · Twitter Post