First published: Wed Aug 07 2024(Updated: )
An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Lopalopa Responsive School Management System | =3.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-41249 is considered a high-severity vulnerability due to its potential for unauthorized access to sensitive information.
To fix CVE-2024-41249, ensure that proper access controls are implemented in the /smsa/view_subject.php file to restrict unauthorized access.
CVE-2024-41249 affects version 3.2.0 of the Lopalopa Responsive School Management System.
The impact of CVE-2024-41249 allows remote unauthenticated attackers to view subject details, leading to potential information disclosure.
As of now, it is advisable to check for updates from the vendor regarding a patch for CVE-2024-41249.