Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-2379
HistoryAug 15, 2022 - 11:21 a.m.

Design/Logic Flaw

2022-08-1511:21:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
plugin
authorization
rest api
sensitive data

0.028 Low

EPSS

Percentile

90.8%

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student’s grades and PII such as email address, physical address, phone number etc

CPENameOperatorVersion
easy_student_resultsle2.2.8

0.028 Low

EPSS

Percentile

90.8%