CVE-2024-40476: CSRF

Published Aug 8, 2024

Updated

A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at the /rental/ajax.php?action=deletetenant.

Affected Software

1 affected component

Mayurik Best House Rental Management=1.0

Event History

Aug 8, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Aug 12, 2024

Data Sourced

via NVD·01:38 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability associated with CVE-2024-40476?

CVE-2024-40476 is a Cross-Site Request Forgery (CSRF) vulnerability in SourceCodester Best House Rental Management System v1.0 that can allow attackers to manipulate tenant data.

What is the severity of CVE-2024-40476?

The severity of CVE-2024-40476 is considered critical as it can lead to unauthorized changes in valid tenant data.

How do I fix CVE-2024-40476?

To fix CVE-2024-40476, implement anti-CSRF tokens in forms and validate request origins to prevent unauthorized actions.

Who is affected by CVE-2024-40476?

Users of SourceCodester Best House Rental Management System version 1.0 are affected by CVE-2024-40476.

What actions can an attacker perform using CVE-2024-40476?

An attacker exploiting CVE-2024-40476 can trick an administrator into adding, modifying, or deleting tenant data.