{"id":"CVE-2024-55232","aliases":["EUVD-2024-52756","GHSA-vpfg-w257-rq9f"],"status":"published","title":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing...","description":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00384,"percentile":0.32701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-290"],"published":"2024-12-18T00:00:00Z","modified":"2026-06-17T08:11:03Z","products":[{"vendor":"phpgurukul","product":"online_notes_sharing_management_system"}],"references":[{"url":"https://github.com/CV1523/CVEs/blob/main/CVE-2024-55232.md","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55232"},{"url":"https://github.com/advisories/GHSA-vpfg-w257-rq9f"}],"sources":{"cve":[{"id":"CVE-2024-55232","description":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.","status":"published","published":"2024-12-18T00:00:00Z","modified":"2024-12-26T19:29:48.21Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:34:22.525279Z"}],"euvd":[{"id":"EUVD-2024-52756","description":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.","status":"published","published":"2024-12-18T00:00:00Z","modified":"2024-12-26T19:29:48Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:32.701542Z"}],"ghsa":[{"id":"GHSA-vpfg-w257-rq9f","title":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing...","description":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.","status":"published","published":"2024-12-19T00:37:35Z","modified":"2024-12-26T21:30:36Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:59:16.46237Z"}],"nvd":[{"id":"CVE-2024-55232","description":"An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information.","status":"published","published":"2024-12-18T22:15:07.297Z","modified":"2026-06-17T08:11:03.303Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:10:40.507978Z"}]}}