CVE-2024-11860

Katalog CVE

CVSS 6.5 · Medium EPSS 0,86%

Kerentanan Incorrect Privilege Assignment pada mayurik best house rental management system. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=delete_tenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

27 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-285: Improper Authorization

EPSS (30 hari)

0,86% peluang dieksploitasi; lebih tinggi dari 57,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%... exploit · advisory pihak ketiga
• https://vuldb.com/?submit.449684 advisory pihak ketiga
• https://drive.google.com/file/d/1CyjtknGVqn5QO_R1WZX-hoGH8ae5DjRq/view exploit
• https://vuldb.com/?ctiid.286245 permissions required
• https://vuldb.com/?id.286245 permissions required
• https://www.sourcecodester.com/ product