CVE-2023-1790
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224724.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.64% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- simple task allocation system project/simple task allocation system
- Source
- cna@vuldb.com
References
- https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/uploadcve.mdBroken Link
- https://vuldb.com/?ctiid.224724Permissions Required, Third Party Advisory
- https://vuldb.com/?id.224724Third Party Advisory
- https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/uploadcve.mdBroken Link
- https://vuldb.com/?ctiid.224724Permissions Required, Third Party Advisory
- https://vuldb.com/?id.224724Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.