CVE-2023-4183

CWE-284 — Improper Access Control3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.1%
top 83.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Inventory Management SystemInventory Management System Project Inventory Management System
Timeline
PublishedAug 6

Description

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The attack can be initiated remotely. VDB-236218 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-773v-x8cm-qjm2: A vulnerability has been found in SourceCodester Inventory Management System 1↗2023-08-06
▶
CVEList
SourceCodester Inventory Management System Password edit_update.php access control↗2023-08-06
▶
CVE-2023-4183 (CRITICAL CVSS 9.8) | A vulnerability has been found in S | cvebase.io