CVE-2023-3018
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A critical vulnerability was found in the Lost and Found Information System version 1.0, affecting unknown code in the file /admin/?page=user/list. Manipulation of this code leads to improper access controls.
Risk Assessment
This vulnerability allows for remote attacks, posing a serious threat to organizational security. The public disclosure of the exploit increases the risk of this vulnerability being exploited.
Recommendation
It is recommended to immediately update the Lost and Found system to the latest version to eliminate this vulnerability. Additionally, monitor systems for unauthorized access.
Original NVD description (English source)
A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230362 is the identifier assigned to this vulnerability.