CVE-2023-0963CWE-284

SourceCodester Music Gallery Site POST Request Users.php access control

High · published February 22, 2023

CVSS v3.1
7.3
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221633 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.04670 · 91.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-02-22T18:12Z
EPSS history
Timeline
  • 22 FEB 18:12Z
    SourceCodester Music Gallery Site POST Request Users.php access control
    cvelistv5