PT-2024-38596 · Unknown · Sourcecodester Online Graduate Tracer System

Wsstiger + 1 · Published 2024-08-15 · Updated 2024-08-19 · CVE-2024-7809

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Online Graduate Tracer System version 1.0

Description A vulnerability was found in the system, affecting an unknown functionality of the file /tracking/nbproject/. The manipulation leads to exposure of information through directory listing. The attack can be launched remotely.

Recommendations For version 1.0, restrict directory access permissions to minimize the risk of exploitation and monitor for exploit attempts. Patch the system as soon as possible. Consider temporarily restricting access to the /tracking/nbproject/ directory until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-548

Related Identifiers

CVE-2024-7809

Affected Products

Sourcecodester Online Graduate Tracer System

References · 10

• 🔥 https://github.com/Wsstiger/cve/blob/main/Tracer_mu.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-7809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7809 · Security Note
• https://vuldb.com/?ctiid.274705 · Note
• https://twitter.com/oktsec/status/1825204573989994772 · Twitter Post
• https://t.me/cvedetector/3217 · Telegram Post
• https://vuldb.com/?submit.390781 · Note
• https://t.me/cvenotify/90683 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1824003007052202291 · Twitter Post
• https://vuldb.com/?id.274705 · Note