A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239354 is the identifier assigned to this vulnerability.
References
Link | Resource |
---|---|
https://skypoc.wordpress.com/2023/09/05/vuln1/ | Exploit Third Party Advisory |
https://vuldb.com/?ctiid.239354 | Permissions Required Third Party Advisory |
https://vuldb.com/?id.239354 | Permissions Required Third Party Advisory |
Configurations
History
13 Sep 2023, 13:48
Type | Values Removed | Values Added |
---|---|---|
First Time |
Contact Manager App Project contact Manager App
Contact Manager App Project |
|
References | (MISC) https://vuldb.com/?ctiid.239354 - Permissions Required, Third Party Advisory | |
References | (MISC) https://skypoc.wordpress.com/2023/09/05/vuln1/ - Exploit, Third Party Advisory | |
References | (MISC) https://vuldb.com/?id.239354 - Permissions Required, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:a:contact_manager_app_project:contact_manager_app:1.0:*:*:*:*:*:*:* |
10 Sep 2023, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-10 01:15
Updated : 2024-05-17 02:31
NVD link : CVE-2023-4869
Mitre link : CVE-2023-4869
CVE.ORG link : CVE-2023-4869
JSON object : View
Products Affected
contact_manager_app_project
- contact_manager_app
CWE
CWE-352
Cross-Site Request Forgery (CSRF)