TI-2022-11533 CVE-2022-28924 · GHSA-mmc3-fc94-5jrcAn information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows…Priority LOW 31An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/.CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00999 · Published 2022-05-18 · No fix listed CWE-668