CVE-2024-13143
CVSS 2.0 Score 3.3 of 10 (low)
Details
Published Jan 6, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-13143 is a newly disclosed vulnerability affecting ZeroWdd studentmanager 1.0. The issue resides in the PermissionController.java file, specifically the submitAddPermission function. Manipulation of the url argument can lead to a cross-site scripting (XSS) attack, potentially allowing remote attackers to inject malicious code. The exploit has been made public, increasing the risk of widespread exploitation. Other parameters might also be susceptible to similar attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Zerowdd Studentmanager