CVE-2026-30523: Input Validation
A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loan Plans" which determine the duration of a loan (in months). However, the backend fails to validate that the duration must be a positive integer. An attacker can submit a negative value for the months parameter. The system accepts this invalid data and creates a loan plan with a negative duration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30523?
CVE-2026-30523 is classified as a Business Logic vulnerability with high implications due to improper input validation.
How do I fix CVE-2026-30523?
To fix CVE-2026-30523, implement proper input validation on the loan duration to prevent negative values.
What systems are affected by CVE-2026-30523?
CVE-2026-30523 affects SourceCodester Loan Management System version 1.0.
What can happen if CVE-2026-30523 is exploited?
If CVE-2026-30523 is exploited, malicious users may create invalid loan plans with negative durations, leading to potential financial inconsistencies.
Is there a known exploit for CVE-2026-30523?
Yes, there is a known exploit that demonstrates the impact of CVE-2026-30523 by allowing the creation of invalid loan plans.