CVE-2022-4232: rinvizle event_registration_system Incorrect Privilege Assignment

Vulnerability summary

CVE-2022-4232 is a critical (CVSS 9.8) Incorrect Privilege Assignment vulnerability in rinvizle event_registration_system. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.1% of scored vulnerabilities.

Timeline

1. 30-11-2022
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.

• CWE-266Incorrect Privilege AssignmentA product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
• CWE-434Unrestricted Upload of File with Dangerous TypeThe product allows the upload or transfer of dangerous file types that are automatically processed within its environment.