CVE-2024-57523: CSRF
Published Feb 6, 2025
·Updated
Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.
Affected Software
2 affected components
Sourcecodester Packers and Movers Management System
oretnom23 Packers And Movers Management System=1.0
Event History
Feb 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57523?
CVE-2024-57523 is classified as a high severity vulnerability due to its potential to create unauthorized admin accounts.
2
How do I fix CVE-2024-57523?
To fix CVE-2024-57523, implement CSRF tokens in the forms that process sensitive user actions.
3
What type of vulnerability is CVE-2024-57523?
CVE-2024-57523 is a Cross Site Request Forgery (CSRF) vulnerability.
4
Who is affected by CVE-2024-57523?
CVE-2024-57523 affects users of SourceCodester Packers and Movers Management System version 1.0.
5
What impact does CVE-2024-57523 have on an organization?
CVE-2024-57523 can lead to unauthorized access and control over admin accounts, compromising system integrity.