Unrated severityNVD Advisory· Published May 18, 2022· Updated Aug 3, 2024

CVE-2022-28924

Description

An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/.

Affected products

UniverSIS-Students/UniverSIS-Studentsdescription
UniverSIS-Students/UniverSIS-Studentsllm-create
Range: <1.5.0

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

suumcuique.org/blog/posts/information-disclosure-vulnerability-universismitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000