CVE-2024-41249

Summary

CVE-2024-41247 is a newly identified access control vulnerability affecting Kashipara Responsive School Management System version 3.2.0. The flaw, present in the "/smsa/add_class.php" and "/smsa/add_class_submit.php" files, enables unauthenticated remote attackers to add new class entries due to insufficient access controls. This weakness could potentially lead to data manipulation or unauthorized access within the school management system. System administrators are advised to upgrade to a patched version immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.