CVE-2023-49982 in School Fees Management System

الملخص

بحسب MITRE • 21/03/2024

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 04/12/2023
• إفشاء: 21/03/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-255909
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 8.8 (CNA)
• EPSS: 0.00842
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-49982
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-49982
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-49982/