CVE-2024-9297
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Summary
CVE-2024-9297 is a critical vulnerability affecting the SourceCodester Online Railway Reservation System version 1.0, specifically in the file located at /admin/. This vulnerability allows for improper authorization through manipulation of the argument page with input such as trains/schedules/system_info, enabling remote attackers to exploit it. The risk to organizations includes potential unauthorized access to sensitive system information, which could compromise both confidentiality and integrity. Remediation steps have not been specified, but it is advisable for affected users to review system permissions and implement appropriate access controls. Given its exploitability score of 2.8 and a base severity rating of medium, organizations should address this vulnerability promptly to mitigate risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions