CVE-2024-2574: SourceCodester Employee Task Management System edit-task.php authorization
A vulnerability classified as critical was found in SourceCodester Employee Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-task.php. The manipulation of the argument taskid leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257077 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2574?
CVE-2024-2574 is classified as critical due to the potential for authorization bypass.
How do I fix CVE-2024-2574?
To fix CVE-2024-2574, ensure proper validation and authorization checks are implemented for the task_id parameter in the /edit-task.php file.
What systems are affected by CVE-2024-2574?
CVE-2024-2574 affects version 1.0 of the SourceCodester Employee Task Management System.
What type of vulnerability is CVE-2024-2574?
CVE-2024-2574 is an authorization bypass vulnerability.
Can CVE-2024-2574 lead to data exposure?
Yes, CVE-2024-2574 can potentially lead to unauthorized access to sensitive data.