CVE-2026-10295
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Vulnerability in SourceCodester Customer Review App 1.0 in the add_review/save_review/get_all_reviews functions of review_app.py causes denial of service (DoS) via manipulation of name/comment arguments in a local attack. Exploit has been published.
Risk Assessment
The risk involves local disruption of the application, potentially affecting the availability of the review service.
Recommendation
Apply a patch or update the application to a newer version.
Original NVD description (English source)
A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a manipulation of the argument name/comment results in denial of service. The attack requires a local approach. The exploit has been made public and could be used.