CVE-2022-3582: SourceCodester Simple Cold Storage Management System cross-site request forgery

Published Oct 18, 2022

Updated

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability.

Affected Software

2 affected components

Simple Cold Storage Management System Project Simple Cold Storage Management System=1.0

oretnom23 Simple Cold Storage Management System=1.0

Event History

Oct 18, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-3582?

CVE-2022-3582 is classified as a problematic vulnerability that may allow for cross-site request forgery attacks.

How do I fix CVE-2022-3582?

To fix CVE-2022-3582, implement CSRF protection measures and validate user actions to prevent unauthorized requests.

What versions are affected by CVE-2022-3582?

CVE-2022-3582 affects version 1.0 of the Simple Cold Storage Management System.

What type of vulnerability is CVE-2022-3582?

CVE-2022-3582 is a cross-site request forgery (CSRF) vulnerability.

What is the impact of CVE-2022-3582?

The impact of CVE-2022-3582 can lead to unauthorized actions being performed on behalf of a legitimate user.