CVE-2024-45983 Cross-site request forgery in n/a
An attacker can trick an authenticated admin into deleting doctor records via a malicious form, allowing unauthorized data modification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-45983?
CVE-2024-45983 is a medium-severity vulnerability in n/a, published on 26 Sep 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attacker to craft a malicious HTML form that submits a request to delete a doctor record. By enticing an authenticated admin user to visit the specially crafted web page, the attacker can leverage the victim's browser to make unauthorized requests to the vulnerable endpoint, effectively allowing the attacker to perform actions on behalf of the admin without their consent.
Weakness: CWE-352
Which versions are affected by CVE-2024-45983?
It affects 1 product.
Products include Kishan0725 Hospital Management System.
How do I fix CVE-2024-45983?
No fix has been published for CVE-2024-45983 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-45983 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-45983 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-9vgq-8h3w-xj2r.