Vulnerability · Published Aug 15, 2024 · Assigned by VulDB
CVE-2024-7809SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing
Medium 5.3
In plain English
A medium-severity security flaw in Online Graduate Tracer System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/nbproject/. The manipulation leads to exposure of information through directory listing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Graduate Tracer System | 1.0 |
Weakness: CWE-548 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- VDB-274705 | SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing vdb-entry
- VDB-274705 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #390781 | sourcecodester Online Graduate Tracer System v1.0 directory traversal third-party-advisory
- https://github.com/Wsstiger/cve/blob/main/Tracer_mu.md exploit