CVE-2023-2670

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/?page=user/manage_user. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228886 is the identifier assigned to this vulnerability.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@vuldb.com

Published

2023-05-12

Last modified

2024-08-02

Weaknesses

CWE-284

Affected products

• Lost And Found Information System (Oretnom23)
• Lost And Found Information System (Sourcecodester)

References

• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2670.md
• https://vuldb.com/?ctiid.228886
• https://vuldb.com/?id.228886