2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"Easy Student Results","vendor":"Unknown","versions":[{"lessThanOrEqual":"2.2.8","status":"affected","version":"2.2.8","versionType":"custom"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:easy_student_results_project:easy_student_results:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"891AA51C-F51F-4DB9-B693-28AC2BD77BB4","versionEndIncluding":"2.2.8","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc"},{"lang":"es","value":"El plugin Easy Student Results de WordPress versiones hasta 2.2.8, carece de autorización en su API REST, lo que permite a usuarios no autenticados recuperar información relacionada con los cursos, los exámenes, los departamentos, así como las calificaciones de los estudiantes y la información personal como la dirección de correo electrónico, la dirección física, el número de teléfono, etc."}],"id":"CVE-2022-2379","lastModified":"2026-06-17T04:41:47.390","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-08-15T11:21:23.480","references":[{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"contact@wpscan.com","type":"Secondary"}]}
|