CVE-2023-0905

· HIGHModified

← All CVEs

CVSS v3.1

7.3

EPSS

3.19%

Published

Feb 18, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBEmployee Task Management System v1.0 - Broken Authentication

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221454 is the identifier assigned to this vulnerability.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-287

Affected Products (1)

employee_task_management_system_project · employee_task_management_systemvulnerable

References (6)

https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20Broken%20Authentication.md

ExploitThird Party Advisory

https://vuldb.com/?ctiid.221454

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.221454