CVE-2024-7753

MEDIUM

SourceCodester Clinics Patient Management System 1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user_images/. The manipulation leads to direct request. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Scores

CVSS v3 5.3
EPSS 0.0031
EPSS Percentile 54.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-425
Status published
Products (1)
oretnom23/clinic\'s_patient_management_system 1.0
Published Aug 14, 2024
Tracked Since Feb 18, 2026