CVE-2024-42580

A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges

Medium · published August 20, 2024

CVSS v3.1
5.7
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Published
2024-08-20T00:00Z
EPSS history
Timeline
  • 20 AUG 00:00Z
    A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges
    cvelistv5