CVE-2024-0265
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 7, 2024
Updated: May 17, 2024
CWE ID 73
Summary
CVE-2024-0265 is a newly disclosed critical vulnerability in SourceCodester Clinic Queuing System 1.0. The issue lies in the GET Parameter Handler component, which is susceptible to file inclusion attacks. By manipulating the argument page, an attacker can include arbitrary files on the server. This vulnerability can be exploited remotely and the exploit has already been made public. The vulnerability identifier VDB-249821 has been assigned to this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share