CVE-2024-2317

A vulnerability was found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This issue affects some unknown processing of the file /prescription/prescription/delete/ of the component Prescription Page. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256271. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-285

• https://drive.google.com/file/d/13-Fxw8fw3VP1PvL0fYvDBVlpTDQHyCkc/view?usp=sharingExploit
• https://vuldb.com/?ctiid.256271Permissions Required, VDB Entry
• https://vuldb.com/?id.256271Third Party Advisory, VDB Entry
• https://drive.google.com/file/d/13-Fxw8fw3VP1PvL0fYvDBVlpTDQHyCkc/view?usp=sharingExploit
• https://vuldb.com/?ctiid.256271Permissions Required, VDB Entry
• https://vuldb.com/?id.256271Third Party Advisory, VDB Entry

Published

Mar 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23157A maliciously crafted SLDASM or SLDPRT file, when parsed in …7.8
• CVE-2024-23158A maliciously crafted IGES file, when parsed in ASMImport229…7.8
• CVE-2024-23159A maliciously crafted STP file, when parsed in stp_aim_x64_v…7.8
• CVE-2024-2316A vulnerability has been found in Bdtask Hospital AutoManage…4.3
• CVE-2024-23168Vulnerability in Xiexe XSOverlay before build 647 allows non…9.8
• CVE-2024-23169The web interface in RSA NetWitness 11.7.2.0 allows Cross-Si…4.6
• CVE-2024-23170An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.…5.5
• CVE-2024-23171An issue was discovered in the CampaignEvents extension in M…5.4
• CVE-2024-23172An issue was discovered in the CheckUser extension in MediaW…5.4
• CVE-2024-23173An issue was discovered in the Cargo extension in MediaWiki …6.1
• CVE-2024-23174An issue was discovered in the PageTriage extension in Media…5.4
• CVE-2024-23177An issue was discovered in the WatchAnalytics extension in M…6.1