VulnerabilityModified
CVE-2022-29008
An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information.
MEDIUM 6.5EPSS 1.29%
Does this matter?
Lower severity and a low EPSS score (1.29%). Track it; it rarely justifies an emergency change on its own.
Description
An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.29% probability · 69th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-639
- Affected
- phpgurukul/bus pass management system
- Source
- cve@mitre.org
References
- https://github.com/sudoninja-noob/CVE-2022-29008/blob/main/CVE-2022-29008.txtThird Party Advisory
- https://www.exploit-db.com/exploits/50263Exploit, Third Party Advisory, VDB Entry
- https://github.com/sudoninja-noob/CVE-2022-29008/blob/main/CVE-2022-29008.txtThird Party Advisory
- https://www.exploit-db.com/exploits/50263Exploit, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.