CVE-2024-2482

CVE-2024-2482 is a problematic vulnerability affecting Surya2Developer Hostel Management Service 1.0, specifically within the /check_availability.php file's HTTP POST Request Handler. It involves an observable response discrepancy when manipulating the 'oldpassword' argument. The vulnerability has a CVSS score of 3.7 (LOW), indicating a low potential impact (partial confidentiality loss) with high attack complexity, despite being remotely exploitable. The exploitation appears difficult, and its FAUCET Risk Score is 8/100. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there Metasploit, Nuclei, or ExploitDB modules available. Community discussion and media coverage are minimal, suggesting low current attention.