CVE-2022-31342: Medium severity Online Car Wash Booking System Project Online Car Wash Booking System vulnerability
Published Jun 1, 2022
·Updated
Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=deleteimg.
Affected Software
2 affected components
Online Car Wash Booking System Project Online Car Wash Booking System=1.0
oretnom23 Online Car Wash Booking System=1.0
Event History
Jun 1, 2022
CVE Published
via MITRE·01:42 PM
Data Sourced
via MITRE·01:42 PM
Description
Jun 2, 2022
Data Sourced
via NVD·02:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-31342?
CVE-2022-31342 has a critical severity rating due to its ability to allow unauthorized file deletion.
2
How do I fix CVE-2022-31342?
To fix CVE-2022-31342, implement proper input validation and authentication checks to restrict file deletion functions.
3
What systems are affected by CVE-2022-31342?
CVE-2022-31342 specifically affects version 1.0 of the Online Car Wash Booking System.
4
What type of attack can exploit CVE-2022-31342?
CVE-2022-31342 can be exploited through a file deletion attack using the vulnerable endpoint.
5
Is there a patch available for CVE-2022-31342?
Currently, there is no official patch available for CVE-2022-31342; mitigating controls should be implemented immediately.