Read the docs

Open-school

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Open-school records in CISA KEV

No Open-school vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Open-school 5 records MEDIUM

Records

5 records in Open-school · all components

TI-2014-07408 CVE-2014-9127 · GHSA-q523-6vmw-xh76

Open-School Community Edition 2.2 does not properly restrict access to the export…

Priority LOW 32

Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01372 Published 2020-02-08 No fix listed CWE-200
TI-2014-07407 CVE-2014-9126 · GHSA-pc36-q444-935v

Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YII_CSRF_TOKEN HTTP cookie or the StudentDocument, StudentCat…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01066 Published 2020-02-08 No fix listed CWE-79
Open these records in search →