Lucene search
HistoryDec 02, 2022 - 12:15 p.m.
CVE-2022-2808
cve-2022-2808
algan software
authorization bypass
prens student information system
object relational mapping injection
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.8%
Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11.
Affected configurations
Node
alganprens_student_information_systemRange<2.1.11
| Vendor | Product | Version | CPE |
|---|---|---|---|
| algan | prens_student_information_system | * | cpe:2.3:a:algan:prens_student_information_system:*:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2022-2808
2022-12-12 01:49:10
prion
prion
Authorization
2022-12-02 12:15:00
cvelist
cvelist
CVE-2022-2808 IDOR in Prens Student Information System
2022-12-12 01:49:10
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.8%
Related for NVD:CVE-2022-2808