CVE-2024-41252

Summary

CVE-2024-41252: A critical access control vulnerability has been identified in Kashipara Responsive School Management System versions 3.2.0. The flaw exists in the admin_student_register_approval.php and admin_student_register_approval_submit.php files, enabling unauthenticated remote attackers to view and approve student registrations. This issue poses a significant risk to the confidentiality and integrity of student data, requiring immediate patching to mitigate potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.