CVE-2024-3089: phpgurukul emergency_ambulance_hiring_portal Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2024-3089 is a medium (CVSS 5.0) Cross-Site Request Forgery (CSRF) vulnerability in phpgurukul emergency_ambulance_hiring_portal. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 30-03-2024
   PublishedVulnerability first disclosed.
2. 01-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/manage-ambulance.php of the component Manage Ambulance Page. The manipulation of the argument del leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258682 is the identifier assigned to this vulnerability.

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.