SourceCodester Contact Manager App update.php cross-site request forgery
Published Sep 10, 2023
8.8
HIGHCVSS 3.1
EPSS 0.42%
Description
A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239354 is the identifier assigned to this vulnerability.
Affected products
-
- Version 1.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SourceCodester | Contact Manager App | n/a |
|
- 1.0
-
- Version 1.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Contact Manager App Project | Contact Manager App | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54708 Advisory
- https://skypoc.wordpress.com/2023/09/05/vuln1/ exploitThird Party Advisory
- https://vuldb.com/?ctiid.239354 signaturepermissions-requiredPermissions RequiredThird Party Advisory
- https://vuldb.com/?id.239354 vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54708 | Advisory | |
| https://skypoc.wordpress.com/2023/09/05/vuln1/ | exploitThird Party Advisory | |
| https://vuldb.com/?ctiid.239354 | signaturepermissions-requiredPermissions RequiredThird Party Advisory | |
| https://vuldb.com/?id.239354 | vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory |
Change history (0)
No recorded changes yet.