CVE-2024-2572: fallo de gravedad alta en SourceCodester Employee Task Management System
SourceCodester Employee Task Management System task-details.php redirect
Publicada el · Actualizada el
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.3epss 1.0%
probabilidad de explotación
1.0%top 37% de las CVE
explotación observada
noninguna fuente lo reporta
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /task-details.php. The manipulation leads to execution after redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257075.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Employee Task Management SystemCVEs relacionadas — SourceCodester Employee Task Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-0905HIGHSourceCodester Employee Task Management System changePasswordForEmployee.php improper authenticationEPSS 3.2%CVE-2023-0904MEDIUMSourceCodester Employee Task Management System task-details.php sql injectionEPSS 1.7%CVE-2024-2569HIGHSourceCodester Employee Task Management System admin-manage-user.php redirectEPSS 1.2%CVE-2024-2573HIGHSourceCodester Employee Task Management System task-info.php redirectEPSS 1.0%CVE-2024-2571HIGHSourceCodester Employee Task Management System manage-admin.php redirectEPSS 1.0%CVE-2024-2570HIGHSourceCodester Employee Task Management System edit-task.php redirectEPSS 1.0%