{"id":"CVE-2024-12355","aliases":["EUVD-2024-50800","GHSA-wx36-4mc3-6qf5"],"status":"published","title":"SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation","description":"A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0031,"percentile":0.24067,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2024-12-09T01:31:07Z","modified":"2026-06-17T06:59:33Z","products":[{"vendor":"razormist","product":"phone_contact_manager_system"},{"vendor":"sourcecodester","product":"phone contact manager system"}],"references":[{"url":"https://vuldb.com/?id.287275","tags":["vdb-entry","technical-description","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.287275","tags":["signature","permissions-required","Permissions Required"]},{"url":"https://vuldb.com/?submit.457864","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://github.com/TinkAnet/cve/blob/main/BOF2.md","tags":["exploit","Exploit","Third Party Advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12355"},{"url":"https://www.sourcecodester.com"},{"url":"https://github.com/advisories/GHSA-wx36-4mc3-6qf5"}],"sources":{"cve":[{"id":"CVE-2024-12355","title":"SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation","description":"A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-12-09T01:31:07.752Z","modified":"2024-12-12T13:45:10.433Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:P/A:N","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:12.635756Z"}],"euvd":[{"id":"EUVD-2024-50800","description":"A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-12-09T01:31:07Z","modified":"2024-12-12T13:45:10Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:04:36.46341Z"}],"ghsa":[{"id":"GHSA-wx36-4mc3-6qf5","title":"A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified...","description":"A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-12-09T03:30:59Z","modified":"2024-12-09T03:31:04Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:59:04.750565Z"}],"nvd":[{"id":"CVE-2024-12355","description":"A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-12-09T02:15:19.3Z","modified":"2026-06-17T06:59:33.74Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:P/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:10:39.434419Z"}]}}