CVE-2024-45983: CSRF
A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attacker to craft a malicious HTML form that submits a request to delete a doctor record. By enticing an authenticated admin user to visit the specially crafted web page, the attacker can leverage the victim's browser to make unauthorized requests to the vulnerable endpoint, effectively allowing the attacker to perform actions on behalf of the admin without their consent.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45983?
The severity of CVE-2024-45983 is classified as critical due to its potential to allow unauthorized deletion of doctor records.
How do I fix CVE-2024-45983?
To fix CVE-2024-45983, implement anti-CSRF tokens in forms and validate user actions to prevent unauthorized requests.
Who is affected by CVE-2024-45983?
CVE-2024-45983 affects authenticated admin users of the Kishan0725 Hospital Management System version 6.3.5.
Can CVE-2024-45983 be exploited remotely?
Yes, CVE-2024-45983 can be exploited remotely if the attacker can entice an authenticated user to visit a malicious link.
What type of vulnerability is CVE-2024-45983?
CVE-2024-45983 is a Cross-Site Request Forgery (CSRF) vulnerability that targets authenticated sessions.