Vulnerabilities > Universis
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-05-18 | CVE-2022-28924 | Exposure of Resource to Wrong Sphere vulnerability in Universis Universis-Students An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/. | 4.0 |
| 2022-04-25 | CVE-2022-29603 | SQL Injection vulnerability in Universis Universis-Api A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints. | 5.5 |