CVE-2024-7226

Name of the Vulnerable Software and Affected Versions SourceCodester Medicine Tracker System version 1.0

Description A vulnerability was found in the Password Change Handler component of the SourceCodester Medicine Tracker System, affecting the file /classes/Users.php?f=save user. The manipulation leads to cross-site request forgery. The attack can be initiated remotely.

Recommendations For SourceCodester Medicine Tracker System version 1.0, consider disabling the Password Change Handler component until a patch is available. Restrict access to the /classes/Users.php?f=save user file to minimize the risk of exploitation. Avoid using the affected component for password changes until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.