CVE-2023-0905highCWE-287

CVE-2023-0905: falha de alta gravidade em SourceCodester Employee Task Management System

SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Employee Task Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

41Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 7.3epss 3.2%
da publicação à arma47 dias
Publicada no NVD18 de fev.
1ª PoC+47d
A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221454 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Employee Task Management System
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — SourceCodester Employee Task Management System

No mesmo produto, das mais perigosas para as menos.

CVE-2023-0904MEDIUMSourceCodester Employee Task Management System task-details.php sql injectionEPSS 1.7%CVE-2024-2569HIGHSourceCodester Employee Task Management System admin-manage-user.php redirectEPSS 1.2%CVE-2024-2573HIGHSourceCodester Employee Task Management System task-info.php redirectEPSS 1.0%CVE-2024-2572HIGHSourceCodester Employee Task Management System task-details.php redirectEPSS 1.0%CVE-2024-2571HIGHSourceCodester Employee Task Management System manage-admin.php redirectEPSS 1.0%CVE-2024-2570HIGHSourceCodester Employee Task Management System edit-task.php redirectEPSS 1.0%