CVE-2024-23747
Last modified
CVE-2024-23747 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. EPSS estimates a 0.69% chance of exploitation in the next 30 days.
Description
The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter, an attacker can gain access to sensitive medical information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Modernasistemas | Modernanet Hospital Management System 2024 | All versions |
References
- https://github.com/louiselalanne/CVE-2024-23747Exploit, Third Party Advisory
- https://github.com/louiselalanne/CVE-2024-23747Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-23747?
How severe is CVE-2024-23747?
How do I fix CVE-2024-23747?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-23741An issue in Hyper on macOS version 3.4.1 and before, allows …9.8
- CVE-2024-23742An issue in Loom on macOS version 0.196.1 and before, allows…9.8
- CVE-2024-23743Notion through 3.1.0 on macOS might allow code execution bec…3.3
- CVE-2024-23744An issue was discovered in Mbed TLS 3.5.1. There is persiste…7.5
- CVE-2024-23745In Notion Web Clipper 1.0.3(7), a .nib file is susceptible t…9.8
- CVE-2024-23746Miro Desktop 0.8.18 on macOS allows local Electron code inje…9.8
- CVE-2024-23749KiTTY versions 0.76.1.13 and before is vulnerable to command…7.8
- CVE-2024-2375The WPQA Builder WordPress plugin before 6.1.1 does not sani…5.4
- CVE-2024-23750MetaGPT through 0.6.4 allows the QaEngineer role to execute …8.8
- CVE-2024-23751LlamaIndex (aka llama_index) through 0.9.34 allows SQL injec…9.8
- CVE-2024-23752GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka …9.8
- CVE-2024-23755ClickUp Desktop before 3.3.77 on macOS and Windows allows co…8.8
Are you affected by CVE-2024-23747?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST