PT-2023-31440

CVE-2023-49981

Published

2023-12-20

Updated

2024-08-05

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions School Fees Management System version 1.0

Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization.

Recommendations For School Fees Management System version 1.0, consider restricting access to sensitive directories and files to minimize the risk of exploitation. As a temporary workaround, review and adjust the application's configuration to require proper authorization for directory listings.

Exploitability

Exploit

Fix

Impacts

Researchers

Geraldo Alcântara

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers