CVE-2022-28924

An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the…

published May 18, 2022

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00999 · 62.4th percentile
Published
2022-05-18T16:33Z
EPSS history
Timeline
  • 18 MAY 16:33Z
    An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the…
    cvelistv5