CVE-2024-55231
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Dec 18, 2024
Updated: Dec 26, 2024
CWE ID 639
Summary
CVE-2024-55231 is a newly disclosed IDOR (Insecure Direct Object Reference) vulnerability affecting the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0. This weakness arises from missing authorization checks, enabling unauthorized users to edit notes belonging to other accounts. The consequences of this issue are significant, as it exposes sensitive data and allows attackers to manipulate another user's information, potentially leading to privacy breaches and data corruption.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.