PT-2024-38831 · Sourcecodester · Sourcecodester Daily Calories Monitoring Tool

Jadu101

·

Published

2024-08-24

·

Updated

2024-08-29

·

CVE-2024-8142

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: SourceCodester Daily Calories Monitoring Tool version 1.0
Description: A vulnerability was found in the SourceCodester Daily Calories Monitoring Tool. This issue affects the file /endpoint/delete-calorie.php and is related to the manipulation of the calorie argument, leading to cross-site scripting. The attack can be initiated remotely.
Recommendations: For version 1.0, upgrade to version 1.1 to mitigate risks. As a temporary workaround, consider restricting access to the /endpoint/delete-calorie.php endpoint until the issue is resolved. Avoid using the calorie argument in the affected endpoint until the issue is fixed.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-8142

Affected Products

Sourcecodester Daily Calories Monitoring Tool