VulnerabilityModified
CVE-2023-1858
A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0.
HIGH 7.5EPSS 0.58%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.58%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.58% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- earnings and expense tracker app project/earnings and expense tracker app
- Source
- cna@vuldb.com
References
- https://vuldb.com/?ctiid.224997Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.224997Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.224997Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.224997Permissions Required, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.