CVE-2024-2574 HIGH

CVE-2024-2574: SourceCodester Employee Task Management System edit-task.php authorization

Vendor Sourcecodester
Product Employee Task Management System
Weakness CWE-639 · IDOR
Published March 18, 2024
Last update August 22, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability classified as critical was found in SourceCodester Employee Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-task.php. The manipulation of the argument task_id leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257077 was assigned to this vulnerability.

Key dates

02Disclosure timeline

March 18, 2024 CVE published
August 22, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-8057 IDOR in Patika Global Technologies' HumanSuite CVE-2026-33931 OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access CVE-2026-3568 MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update CVE-2024-5977 GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions CVE-2023-0558 ContentStudio <= 1.2.5 - Authorization Bypass