CVE-2022-22296

Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint

published January 24, 2022

CVSS
—
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint. Simply change the value and data of other users can be displayed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00989 · 62.2th percentile
Published
2022-01-24T13:11Z
EPSS history
Timeline
  • 24 JAN 13:11Z
    Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint
    cvelistv5