CVE-2024-41246

Summary

CVE-2024-41246 is a newly disclosed vulnerability affecting the Kashipara Responsive School Management System version 3.2.0. This issue involves an Incorrect Access Control error in the /smsa/admin_dashboard.php file. Unauthenticated remote attackers can exploit this flaw to gain unauthorized access to the administrator dashboard, potentially allowing them to manipulate system settings or sensitive data. This vulnerability poses a significant risk to organizations using this school management system and should be addressed promptly through updates or patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.