How severe is CVE-2024-0260?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.5 out of 10.

What type of vulnerability is CVE-2024-0260?

This is classified as CWE-613, which is a common weakness in software security.

CVE-2024-0260

HIGH Year: 2024

CVSS v3 Score

7.5

High

CVSS v2 Score

4.0

Medium

Weakness Type

CWE-613

View all →

Vulnerability Description

A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file change_password_teacher.php of the component Password Change. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249816.

CVE-2016-11058

HIGH

CVSS:7.5(High)

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs.

CWE-6132016

CVE-2016-20007

HIGH

CVSS:7.5(High)

The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

CWE-6132016

CVE-2017-12159

HIGH

CVSS:7.5(High)

It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible i...

CWE-6132017