CVE-2024-9321
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Sep 29, 2024
Updated: Oct 1, 2024
CWE ID 284
Summary
CVE-2024-9321 is a critical vulnerability affecting the SourceCodester Online Railway Reservation System 1.0. This issue is linked to improper access controls in the processing of the file /admin/inquiries/view_details.php. Manipulation of the argument id can lead to unauthorized access. The vulnerability can be exploited remotely, and the exploit has been disclosed to the public, increasing the risk of attacks. Organizations using this system are advised to apply the necessary patches as soon as possible to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.