CVE-2024-42764

Name of the Vulnerable Software and Affected Versions Kashipara Bus Ticket Reservation System version 1.0 Online Shopping System version 1.0

Description The issue concerns a Cross Site Request Forgery (CSRF) vulnerability via the /deleteTicket.php endpoint. This allows for unauthorized actions to be performed on behalf of a user. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For Kashipara Bus Ticket Reservation System version 1.0, as a temporary workaround, consider disabling access to the /deleteTicket.php endpoint until a patch is available. For Online Shopping System version 1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.