CVE-2023-6773

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accounts_con/register_account of the component User Creation Handler. The manipulation of the argument account_type with the input Admin leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247909 was assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:codeastro:pos_and_inventory_management_system:1.0:*:*:*:*:*:*:*

History

20 Dec 2023, 18:31

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
First Time Codeastro
Codeastro pos And Inventory Management System
CPE cpe:2.3:a:codeastro:pos_and_inventory_management_system:1.0:*:*:*:*:*:*:*
References () https://vuldb.com/?ctiid.247909 - () https://vuldb.com/?ctiid.247909 - Third Party Advisory
References () https://vuldb.com/?id.247909 - () https://vuldb.com/?id.247909 - Third Party Advisory
References () https://drive.google.com/drive/folders/1yuc1n6tr57wD8qsT0HAFDVAuii7iibDM?usp=sharing - () https://drive.google.com/drive/folders/1yuc1n6tr57wD8qsT0HAFDVAuii7iibDM?usp=sharing - Exploit

13 Dec 2023, 21:25

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-13 20:15

Updated : 2024-05-17 02:33


NVD link : CVE-2023-6773

Mitre link : CVE-2023-6773

CVE.ORG link : CVE-2023-6773


JSON object : View

Products Affected

codeastro

  • pos_and_inventory_management_system
CWE
CWE-284

Improper Access Control