CVE-2019-12837

Medium

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via…

mitre·CWE-706·Published 2019-12-31

CVSS

4.3

EPSS

0.01

KEV

Exploits

cve.orgen

155 chars

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.

NVDen

155 chars

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.

La API Java en accesuniversitat.gencat.cat 1.7.5 permite a los atacantes remotos obtener información personal de todos los estudiantes registrados a través de varios puntos finales API.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N