CVE-2023-46449

n/a / n/a PUBLISHED

Description (CNA)

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/sajaljat/CVE-2023-46449/tree/main
https://www.youtube.com/watch?v=H5QnsOKjs3s

ADP enrichment

CVE

No English description supplied.

https://github.com/sajaljat/CVE-2023-46449/tree/main
https://www.youtube.com/watch?v=H5QnsOKjs3s

CISA-ADP

No English description supplied.

No references supplied.