CVE-2024-11097: razormist student_record_management_system Improper Resource Shutdown or Release
Vulnerability summary
CVE-2024-11097 is a medium (CVSS 5.5) Improper Resource Shutdown or Release vulnerability in razormist student_record_management_system. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 18.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-11-2024PublishedVulnerability first disclosed.
- 12-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS metrics
7 scores · 2 sources · 4 versions- NVDNIST4.8MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVE.orgCNA3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
- NVDNIST1.7LowAV:L/AC:L/Au:S/C:N/I:N/A:P
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCve
Maturity: poc
Weaknesses
CWE · root cause- CWE-404Improper Resource Shutdown or ReleaseThe product does not release or incorrectly releases a resource before it is made available for re-use.
- CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected systems
Razormist1 product
Sourcecodester1 product
2 vendors · 2 products
References
5 links- vuldb.com?submit.441237Third Party Advisory
- www.sourcecodester.comProduct