CVE-2024-7851

CWE-2853 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 70.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Yoga Class Registration SystemOretnom23 Yoga Class Registration System
Timeline
PublishedAug 16

Description

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Yoga Class Registration System Add User Users.php improper authorization↗2024-08-16
▶
GHSA
GHSA-f7qf-qc3w-6gvg: A vulnerability has been found in SourceCodester Yoga Class Registration System 1↗2024-08-16
▶
CVE-2024-7851 (MEDIUM CVSS 5.3) | A vulnerability has been found in S | cvebase.io