CVE-2024-3376

Katalog CVE

CVSS 9.8 · Critical EPSS 1,3%

Kerentanan Execution After Redirect (EAR) pada oretnom23 computer laboratory management system. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipulation of the argument url leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259497 was assigned to this vulnerability.

Rincian

Terbit di NVD

6 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-698: Execution After Redirect (EAR)
CWE-670: Always-Incorrect Control Flow Implementation

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Sospiro014/zday1/blob/main/Execution_After_Redirect.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.259497 advisory pihak ketiga
• https://vuldb.com/?submit.311154 advisory pihak ketiga
• https://vuldb.com/?ctiid.259497 permissions required