CVE-2024-42795

Description

An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.

Reserved 2024-08-05 | Published 2024-09-16 | Updated 2024-09-18 | Assigner mitre

References

www.kashipara.com/

github.com/...tem v1.0/Broken Access Control - View User.pdf

cve.org (CVE-2024-42795)

nvd.nist.gov (CVE-2024-42795)

Download JSON