PT-2019-12977
CVE-2019-12837
·
Publicado
2019-12-31
·
Atualizado
2021-07-21
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
accesuniversitat.gencat.cat version 1.7.5
Description
The Java API in the affected software allows remote attackers to obtain personal information of all registered students via several API endpoints.
Recommendations
For version 1.7.5, consider restricting access to the API endpoints until a patch is available. As a temporary workaround, limit the information that can be retrieved through the API to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾