Lucene search
MitreCVE-2024-28320HistoryApr 29, 2024 - 6:15 p.m.
CVE-2024-28320
2024-04-2918:15:07
CWE-639
mitre
web.nvd.nist.gov
27
insecure direct object references
user parameters manipulation
unauthorized access
post request
patient data privacy
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.0%
Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.
Related
nvd
nvd
CVE-2024-28320
2024-04-29 18:15:07
cvelist
cvelist
CVE-2024-28320
2024-04-29 00:00:00
vulnrichment
vulnrichment
CVE-2024-28320
2024-04-29 00:00:00
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.0%
Related for CVE-2024-28320