CVE-2024-7645: oretnom23 clinic\'s_patient_management_system Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2024-7645 is a medium (CVSS 6.9) Cross-Site Request Forgery (CSRF) vulnerability in oretnom23 clinic\'s_patient_management_system. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 09-08-2024
   PublishedVulnerability first disclosed.
2. 09-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file users.php of the component User Page. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.