CVE-2023-0999

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources

Severity

8.8HIGH

EPSS

0.3%

top 43.26%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Sales Tracker Management System Sales Tracker Management System Project Sales Tracker Management System

Timeline

PublishedFeb 24

Description

A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of the file admin/?page=user/list. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221734 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/sales_tracker_management_system1.0

▶NVDsales_tracker_management_system_project/sales_tracker_management_system1.0

🔴Vulnerability Details

CVEList

SourceCodester Sales Tracker Management System cross-site request forgery↗2023-02-24

▶

GHSA

GHSA-pp6v-gcw7-42cf: A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1↗2023-02-24

▶