CVE-2019-12834

CVSS 7.3 HIGHEPSS 0.9%

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI.

CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:U/UI:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/miruser/Roche-CVEs/blob/master/CVE-2019-12834.md