Vulnerability · Published Jan 9, 2024 · Assigned by VulDB

CVE-2024-0349SourceCodester Engineers Online Portal missing secure attribute

Low 3.7

In plain English

A low-severity security flaw in Engineers Online Portal from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.4%top 67.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-250117 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Engineers Online Portal	1.0

Weakness: CWE-614 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://vuldb.com/?id.250117 vdb-entry
https://vuldb.com/?ctiid.250117 signature, permissions-required
https://mega.nz/file/TU1X3TIQ#7bPvxEP0KrdoDZVg-dqinNC5fEQrG5uu58jWzPGh904 exploit