CVE-2022-46087 in CloudSchool

摘要

由 MITRE • 2023-01-30

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2022-11-28
• 披露: 2023-01-30
• 管理: 已接受
• 条目: VDB-219760
• CPE: 准备好
• CWE: CWE-79 (已确认)
• 利用: 下载
• CVSS: 5.4 (NVD)
• EPSS: 0.00602
• KEV: 否
• 活动: 非常低
• 部门: Finance, Education, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-46087
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-46087
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-46087/