CVE-2024-2151

Name of the Vulnerable Software and Affected Versions SourceCodester Online Mobile Management Store version 1.0

Description A problematic vulnerability was found in the component Product Price Handler of the SourceCodester Online Mobile Management Store. The manipulation of the quantity argument with the input -1 leads to business logic errors. The attack can be launched remotely.

Recommendations For version 1.0, consider restricting the input of the quantity argument to prevent business logic errors until a patch is available. As a temporary workaround, avoid using negative values for the quantity argument in the affected component.