Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27hr-9v6h-xmx3

Опубликовано: 03 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.

EPSS

Процентиль: 15%
0.0005
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 6.5
nvd
6 месяцев назад

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.

EPSS

Процентиль: 15%
0.0005
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639