Vulnerabilities > CVE-2022-2379 - Unspecified vulnerability in Easy Student Results Project Easy Student Results

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

easy-student-results-project

NVD

Published: 2022-08-15

Updated: 2024-11-21

Summary

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc

Vulnerable Configurations

Part	Description	Count
Application	Easy_Student_Results_Project Easy Student Results Project Easy Student Results - Easy Student Results Project Easy Student Results 1.1 Easy Student Results Project Easy Student Results 1.2 Easy Student Results Project Easy Student Results 1.3 Easy Student Results Project Easy Student Results 1.4 Easy Student Results Project Easy Student Results 1.5 Easy Student Results Project Easy Student Results 1.6 Easy Student Results Project Easy Student Results 1.7 Easy Student Results Project Easy Student Results 1.8 Easy Student Results Project Easy Student Results 1.9 Easy Student Results Project Easy Student Results 2.0 Easy Student Results Project Easy Student Results 2.1 Easy Student Results Project Easy Student Results 2.2 Easy Student Results Project Easy Student Results 2.2.1 Easy Student Results Project Easy Student Results 2.2.2 Easy Student Results Project Easy Student Results 2.2.3 Easy Student Results Project Easy Student Results 2.2.4 Easy Student Results Project Easy Student Results 2.2.5 Easy Student Results Project Easy Student Results 2.2.6 Easy Student Results Project Easy Student Results 2.2.7 Easy Student Results Project Easy Student Results 2.2.8	21

Summary

Vulnerable Configurations

References