CVE-2022-2019CWE-285

SourceCodester Prison Management System New User Creation improper authorization

High · published June 7, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.2th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-06-07T11:05Z
EPSS history
Timeline
  • 07 JUN 11:05Z
    SourceCodester Prison Management System New User Creation improper authorization
    cvelistv5