CVE-2024-27713

2024-07-0500:00:00

mitre

github.com

eskooly free online school

management software

remote attacker

http response header

privileges escalation

AI Score

7.2

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:eskooly:web_product:*:*:*:*:*:*:*:*"
    ],
    "vendor": "eskooly",
    "product": "web_product",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]