PT-2026-90861 · Jaychouchannel · Tourism Management System
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
jaychouchannel Tourism-Management-System versions prior to 84d8ec384f669df3985293dab293bb7b477efa64
Description
A security flaw exists in the Update Endpoint component where a manipulation of an unknown function allows for missing authentication. This issue enables a remote attacker to bypass authentication requirements.
Recommendations
Install patch 84d8ec384f669df3985293dab293bb7b477efa64.
Restrict access to the Update Endpoint component to minimize the risk of exploitation.
Exploit
Fix
Improper Authentication
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tourism Management System