CVE-2024-12955

Katalog CVE

CVSS 4.3 · Medium EPSS 0,82%

Kerentanan Cross-Site Request Forgery (CSRF) pada phpgurukul blood bank & donor management system. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

26 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)
CWE-862: Missing Authorization

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 55,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.289318 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.468878 advisory pihak ketiga · vdb entry
• https://phpgurukul.com/ product
• https://vuldb.com/?ctiid.289318 permissions required · vdb entry