Code injection

2022-01-2414:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

Sourcecodester Hospital’s Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint. Simply change the value and data of other users can be displayed.

CPENameOperatorVersion
hospital\\'s_patient_records_management_systemeq1.0

CPE	Name	Operator	Version
	hospital\\'s_patient_records_management_system	eq	1.0

References

github.com/vlakhani28/CVE-2022-22296/blob/main/README.md