PT-2019-12977
CVE-2019-12837
·
Published
2019-12-31
·
Updated
2021-07-21
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
accesuniversitat.gencat.cat version 1.7.5
Description
The Java API in the affected software allows remote attackers to obtain personal information of all registered students via several API endpoints.
Recommendations
For version 1.7.5, consider restricting access to the API endpoints until a patch is available. As a temporary workaround, limit the information that can be retrieved through the API to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾