CVE-2024-2277

CVE-2024-2277 affects Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. The vulnerability resides in the Password Reset Handler’s /Setting/change_password_save endpoint, where manipulation enables cross-site request forgery (CSRF) and can be triggered remotely. Public disclosures...

CVE-2024-2277 Bdtask G-Prescription Gynaecology & OBS Consultation Software Password Reset change_password_save cross-site request forgery

A vulnerability was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Setting/changepasswordsave of the component Password Reset Handler. The manipulation leads to cross-site...