cvelist/2019/12xxx/CVE-2019-12837.json

62 lines
2.0 KiB
JSON
Raw Normal View History

2019-06-15 19:00:45 +00:00
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
2019-12-31 17:01:03 +00:00
"ID": "CVE-2019-12837",
"STATE": "PUBLIC"
2019-06-15 19:00:45 +00:00
},
2019-12-31 17:01:03 +00:00
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
2019-06-15 19:00:45 +00:00
"description": {
"description_data": [
{
"lang": "eng",
2019-12-31 17:01:03 +00:00
"value": "The Java API in Generalitat de Catalunya accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints, given that the attacker is authenticated as a student: 1) https://accesuniversitat.gencat.cat/accesuniversitat/accesuniversitat-rs/AppJava/api/v1/estudiants/{student_id}/ 2) https://accesuniversitat.gencat.cat/accesuniversitat/accesuniversitat-rs/AppJava/api/v1/estudiants/?page={page}."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://vulnz.avm99963.com/T15",
"url": "https://vulnz.avm99963.com/T15"
2019-06-15 19:00:45 +00:00
}
]
}
}