TROYANOSYVIRUS
← Zuruck zu CVEs

CVE-2024-42766

MEDIUM
5.4

Beschreibung

Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.

CVE Details

CVSS v3.1 Bewertung5.4
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionNONE
Veroffentlicht8/23/2024
Zuletzt geandert8/26/2024
Quellenvd
Honeypot-Sichtungen0

Betroffene Produkte

kjayvik:bus_ticket_reservation_system

Schwachen (CWE)

CWE-284

Referenzen

https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/Broken%20Access%20Control%20-%20Delete%20Bookings.pdf(cve@mitre.org)
https://www.kashipara.com/(cve@mitre.org)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.