PT-2024-38830 · Unknown · Sourcecodester Daily Calories Monitoring Tool

Jadu101

·

Published

2024-08-24

·

Updated

2024-08-29

·

CVE-2024-8141

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: SourceCodester Daily Calories Monitoring Tool version 1.0
Description: A vulnerability was found in the SourceCodester Daily Calories Monitoring Tool, affecting an unknown part of the file /endpoint/add-calorie.php. The manipulation of the arguments calorie date and calorie name leads to cross-site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Recommendations: For version 1.0, upgrade to version 1.1 to mitigate risks. As a temporary workaround, consider restricting access to the /endpoint/add-calorie.php endpoint until the update is applied. Avoid using the arguments calorie date and calorie name in the affected endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-8141

Affected Products

Sourcecodester Daily Calories Monitoring Tool