PT-2026-45638 · Sourcecodester · Customer Review App

Ameenkbrd · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10295

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SourceCodester Customer Review App version 1.0

Description A denial of service can be triggered through the manipulation of the name and comment arguments. This issue affects the add review(), save review(), and get all reviews() functions within the review app.py file. The attack requires a local approach.

Recommendations Update SourceCodester Customer Review App version 1.0 to a patched version. As a temporary workaround, restrict access to the add review(), save review(), and get all reviews() functions in the review app.py file.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-10295

Affected Products

Customer Review App

References · 9

• 🔥 https://pastebin.com/Ud5vaGp6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10295 · Security Note
• https://vuldb.com/vuln/367588 · Note
• https://vuldb.com/cve/CVE-2026-10295 · Note
• https://sourcecodester.com · Note
• https://twitter.com/infoflowcloud/status/2061592593801130483 · Twitter Post
• https://vuldb.com/vuln/367588/cti · Note
• https://twitter.com/CVEnew/status/2061590958186094784 · Twitter Post
• https://vuldb.com/submit/826530 · Note