CVE-2022-2578CWE-284

SourceCodester Garage Management System createUser.php access control

Medium · published July 29, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00732 · 53.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-07-29T15:40Z
EPSS history
Timeline
  • 29 JUL 15:40Z
    SourceCodester Garage Management System createUser.php access control
    cvelistv5