CVE-2024-24496: Daily Habit Tracker 1.0 - Broken Access Control

Published Feb 8, 2024

Updated

An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components.

Credit

Yevhenii Butenko

Affected Software

1 affected component

Remyandrade Daily Habit Tracker=1.0

Event History

Feb 8, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 2, 2024

Exploit Published

via ExploitDB·12:00 AM

Known Exploited

via ExploitDB·12:00 AM

Frequently Asked Questions

What is the severity of CVE-2024-24496?

CVE-2024-24496 has been classified with a high severity due to its potential for remote attacker manipulation of trackers.

How do I fix CVE-2024-24496?

To fix CVE-2024-24496, implement proper access controls in the home.php, add-tracker.php, delete-tracker.php, and update-tracker.php components.

What components are affected by CVE-2024-24496?

CVE-2024-24496 affects the home.php, add-tracker.php, delete-tracker.php, and update-tracker.php components of Daily Habit Tracker version 1.0.

Can CVE-2024-24496 be exploited remotely?

Yes, CVE-2024-24496 allows a remote attacker to manipulate trackers without authentication due to inadequate access controls.

What software version is impacted by CVE-2024-24496?

CVE-2024-24496 specifically impacts Daily Habit Tracker version 1.0.