CVE-2024-7912: CodeAstro Online Railway Reservation System assets exposure of information through directory listing

Published Aug 18, 2024

Updated

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Aug 18, 2024

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7912?

CVE-2024-7912 has been categorized as a problematic vulnerability due to the exposure of sensitive information.

How do I fix CVE-2024-7912?

To mitigate CVE-2024-7912, restrict directory listing in the /admin/assets/ directory configuration.

What software is affected by CVE-2024-7912?

CVE-2024-7912 affects version 1.0 of the Online Railway Reservation System.

What type of vulnerability is CVE-2024-7912?

CVE-2024-7912 is a directory listing vulnerability that can lead to information exposure.

Can CVE-2024-7912 be exploited remotely?

Yes, CVE-2024-7912 can be exploited remotely if directory listing is enabled on the affected server.