TI-2019-03530 CVE-2019-5069 · GHSA-hxq6-qv9r-2gqc
Deserialization of untrusted data in Epignosis
Priority MEDIUM 42
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.
No Epignosishq vulnerabilities are listed in CISA KEV.
3 records
A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21.
An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier.