CVE-2022-3582 — Incorrect Authorization in Simple Cold Storage Management System

CWE-863 — Incorrect AuthorizationCWE-352 — Cross-Site Request Forgery3 documents3 sources
Severity
3.5LOWNVD
CNA4.3
EPSS
0.1%
top 65.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Simple Cold Storage Management SystemOretnom23 Simple Cold Storage Management System
Timeline
PublishedOct 18

Description

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cj34-p4xc-82gq: A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1↗2022-10-18
▶
CVEList
SourceCodester Simple Cold Storage Management System cross-site request forgery↗2022-10-18
▶
CVE-2022-3582 — Incorrect Authorization | cvebase