CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/…

High · published July 16, 2019

CVSS v3.0
7.3
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00865 · 58.3th percentile
Published
2019-07-16T17:55Z
EPSS history
Timeline
  • 16 JUL 17:55Z
    In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/…
    cvelistv5