CVE-2025-60306: Critical severity Code-projects Simple Car Rental System vulnerability
code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60306?
CVE-2025-60306 is considered a critical vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-60306?
To mitigate CVE-2025-60306, ensure that proper permission checks are implemented and restrict session manipulation by low privilege users.
Who is affected by CVE-2025-60306?
CVE-2025-60306 affects users of Simple Car Rental System version 1.0 where low privilege users can exploit the permission bypass.
What type of vulnerability is CVE-2025-60306?
CVE-2025-60306 is a permission bypass vulnerability that allows unauthorized users to perform sensitive operations.
Can CVE-2025-60306 lead to data exposure?
Yes, CVE-2025-60306 can potentially lead to unauthorized access to sensitive data due to improper privilege management.