CVE-2022-46087 in CloudSchool

Résumé

par MITRE • 30/01/2023

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 28/11/2022
• Divulgation: 30/01/2023
• Modérer: accepté
• Entrée: VDB-219760
• CPE: prêt
• CWE: CWE-79 (confirmé)
• Exploitation: Télécharger
• CVSS: 5.4 (NVD)
• EPSS: 0.00602
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-46087
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-46087
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-46087/