First published: Mon Mar 18 2024(Updated: )
A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this issue is some unknown functionality of the file /task-details.php. The manipulation of the argument task_id leads to authorization bypass. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257078 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Employee Task Management System | ||
Employee Daily Task Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-2575 is classified as a critical vulnerability.
CVE-2024-2575 is an authorization bypass vulnerability affecting the task_id argument in the task-details.php file.
To fix CVE-2024-2575, you should implement proper authentication checks for the task_id parameter in the affected file.
CVE-2024-2575 affects SourceCodester Employee Task Management System version 1.0.
Exploitation of CVE-2024-2575 may allow unauthorized users to access or manipulate sensitive task management functions.