CVE-2023-1858

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-1858
A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://vuldb.com/?ctiid.224997 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.224997 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.224997 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.224997 Permissions Required Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:earnings_and_expense_tracker_app_project:earnings_and_expense_tracker_app:1.0:*:*:*:*:*:*:*
History

21 Nov 2024, 07:40

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.224997 - Permissions Required, Third Party Advisory, VDB Entry () https://vuldb.com/?ctiid.224997 - Permissions Required, Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.224997 - Permissions Required, Third Party Advisory, VDB Entry () https://vuldb.com/?id.224997 - Permissions Required, Third Party Advisory, VDB Entry
CVSS v2 : 4.0
v3 : 7.5 		v2 : 4.0
v3 : 4.3

11 Apr 2023, 14:45

Type Values Removed Values Added
First Time Earnings And Expense Tracker App Project earnings And Expense Tracker App
Earnings And Expense Tracker App Project
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
References (MISC) https://vuldb.com/?ctiid.224997 - (MISC) https://vuldb.com/?ctiid.224997 - Permissions Required, Third Party Advisory, VDB Entry
References (MISC) https://vuldb.com/?id.224997 - (MISC) https://vuldb.com/?id.224997 - Permissions Required, Third Party Advisory, VDB Entry
CWE CWE-200 NVD-CWE-noinfo
CPE cpe:2.3:a:earnings_and_expense_tracker_app_project:earnings_and_expense_tracker_app:1.0:*:*:*:*:*:*:*

05 Apr 2023, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-05 09:15

Updated : 2024-11-21 07:40

NVD link : CVE-2023-1858

Mitre link : CVE-2023-1858

CVE.ORG link : CVE-2023-1858

JSON object : View

Products Affected

earnings_and_expense_tracker_app_project

  • earnings_and_expense_tracker_app
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo