TROYANOSYVIRUS
← Volver a CVEs

CVE-2024-42766

MEDIUM
5.4

Descripcion

Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.

Detalles CVE

Puntuacion CVSS v3.15.4
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado8/23/2024
Ultima modificacion8/26/2024
Fuentenvd
Avistamientos honeypot0

Productos afectados

kjayvik:bus_ticket_reservation_system

Debilidades (CWE)

CWE-284

Referencias

https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/Broken%20Access%20Control%20-%20Delete%20Bookings.pdf(cve@mitre.org)
https://www.kashipara.com/(cve@mitre.org)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.