External Control of Assumed-Immutable Web Parameter... · CVE-2023-24373 · GitHub Advisory Database · GitHub

External Control of Assumed-Immutable Web Parameter...

Low severity Unreviewed Published Jun 4, 2024 to the GitHub Advisory Database

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.

References

Published by the National Vulnerability Database

Jun 3, 2024

Published to the GitHub Advisory Database Jun 4, 2024

Severity

Low

3.7

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

High

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N