A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
Metrics
Affected Vendors & Products
References
History
Thu, 22 Aug 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 21 Aug 2024 14:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Siamonhasan
Siamonhasan warehouse Inventory System |
|
Weaknesses | CWE-352 | |
CPEs | cpe:2.3:a:siamonhasan:warehouse_inventory_system:2.0:*:*:*:*:*:*:* | |
Vendors & Products |
Siamonhasan
Siamonhasan warehouse Inventory System |
|
Metrics |
cvssV3_1
|
Tue, 20 Aug 2024 13:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-08-20T00:00:00
Updated: 2024-08-22T13:58:17.550Z
Reserved: 2024-08-05T00:00:00
Link: CVE-2024-42584
Vulnrichment
Updated: 2024-08-22T13:58:11.756Z
NVD
Status : Analyzed
Published: 2024-08-20T13:15:09.173
Modified: 2024-08-21T13:37:57.767
Link: CVE-2024-42584
Redhat
No data.