CVE-2023-46449

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control

published October 26, 2023

CVSS
—
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00756 · 54.6th percentile
Published
2023-10-26T00:00Z
EPSS history
Timeline
  • 26 OCT 00:00Z
    Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control
    cvelistv5