Lucene search
+L

4 matches found

NVD
NVD
•added 2022/10/31 4:15 p.m.•32 views

CVE-2022-3774

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /trainschedulerapp/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may...

9.1CVSS0.01221EPSS
SaveExploits2References3
CVE
CVE
•added 2022/10/31 12:00 a.m.•75 views

CVE-2022-3774

CVE-2022-3774 affects SourceCodester Train Scheduler App 1.0. The vulnerability is an Insecure Direct Object Reference (IDOR) in the endpoint /train_scheduler_app/?action=delete, where the id parameter allows improper control of resource identifiers. Multiple sources (NVD, Red Hat, CVE listings, ...

9.1CVSS7.9AI score0.01221EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•4 views

CVE-2022-3774: Improper Control of Resource Identifiers

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /trainschedulerapp/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may...

9.1CVSS7.9AI score0.01221EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2022/10/31 12:00 a.m.•8 views

CVE-2022-3774 SourceCodester Train Scheduler App resource injection

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /trainschedulerapp/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may...

5.4CVSS9.5AI score0.01221EPSS
SaveExploits2References3
Rows per page
Query Builder