CVE-2024-2316: Bdtask Hospital AutoManager Update Bill Page cross-site request forgery
A vulnerability has been found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This vulnerability affects unknown code of the file /billing/bill/edit/ of the component Update Bill Page. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2316?
CVE-2024-2316 is classified as a problematic vulnerability due to its potential impact on application security.
How does CVE-2024-2316 affect Bdtask Hospital AutoManager?
CVE-2024-2316 affects the Update Bill Page in Bdtask Hospital AutoManager, leading to cross-site request forgery vulnerabilities.
What versions of Bdtask Hospital AutoManager are affected by CVE-2024-2316?
CVE-2024-2316 affects Bdtask Hospital AutoManager versions up to and including 20240227.
How can CVE-2024-2316 be mitigated?
To mitigate CVE-2024-2316, implement CSRF tokens or similar mechanisms in the affected Update Bill Page.
Is any specific code vulnerable in CVE-2024-2316?
CVE-2024-2316 involves unknown code associated with the /billing/bill/edit/ file in the application.