CVE-2022-3674: high-severity vulnerability in SourceCodester Sanitization Management System
SourceCodester Sanitization Management System missing authentication
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 0.6%
A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The identifier VDB-212017 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Sanitization Management SystemRelated CVEs — SourceCodester Sanitization Management System
In the same product, most dangerous first.
CVE-2022-3942MEDIUMSourceCodester Sanitization Management System cross site scriptingEPSS 0.8%CVE-2022-3504MEDIUMSourceCodester Sanitization Management System sql injectionEPSS 0.8%CVE-2022-3518LOWSourceCodester Sanitization Management System User Creation cross site scriptingEPSS 0.7%CVE-2022-3505LOWSourceCodester Sanitization Management System cross site scriptingEPSS 0.6%CVE-2022-3868MEDIUMSourceCodester Sanitization Management System sql injectionEPSS 0.6%CVE-2022-3992LOWSourceCodester Sanitization Management System Banner Image cross site scriptingEPSS 0.5%
References
https://vuldb.com/?id.212017