medium4.3
CVE-2019-12837
The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.
Impact
The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gencat | Portal D\'Acces A La Universitat | Version 1.7.5 |