Vulnerability · Published Jan 30, 2024 · Assigned by VulDB
CVE-2024-1027SourceCodester Facebook News Feed Like Post unrestricted upload
Medium 6.3
In plain English
A medium-severity unrestricted file upload in Facebook News Feed Like from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.5%top 59.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-252300.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Facebook News Feed Like | 1.0 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- https://vuldb.com/?id.252300 vdb-entry
- https://vuldb.com/?ctiid.252300 signature, permissions-required