medium6.5
CVE-2022-28924
An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the e…
Impact
An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Universis | Universis-Students | before 1.5.0 |