CVE-2024-40476

2024-08-0800:00:00

mitre

www.cve.org

vulnerability

csrf

sourcecodester best house rental management system

attacker

administrator

tenant data

html page

crafted

delete tenant action

EPSS

0.001

Percentile

19.8%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at the /rental/ajax.php?action=delete_tenant.