3 matches found
CVE-2023-49339
Ellucian Banner 9.17 allows Insecure Direct Object Reference IDOR via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint...
6.5CVSS6.5AI score0.00589EPSS
SaveExploits1References2
CVE-2023-49339
Ellucian Banner 9.17 allows Insecure Direct Object Reference IDOR via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint...
6.4AI score0.00589EPSS
SaveExploits1References2
CVE-2023-49339: Authorization Bypass Through User-Controlled Key
Ellucian Banner 9.17 allows Insecure Direct Object Reference IDOR via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint...
6.5CVSS5.8AI score0.00589EPSS
SaveExploits1References3
20