Vulnerability Details CVE-2024-56889
Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 47.7%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2024-56889
-
cpe:2.3:a:codeastro:complaint_management_system:1.0