CVE-2024-2482

Summary

CVE-2024-2482 is a newly disclosed vulnerability affecting the Surya2Developer Hostel Management Service 1.0. This issue lies in the HTTP POST Request Handler's /check_availability.php file, which handles the oldpassword argument in an uncertain manner. Manipulation of this argument can result in observable response discrepancies, enabling remote attacks. The attack complexity is relatively high, and exploitation is considered difficult, but details have been made public. VDB-256891 is the associated identifier for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.