Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL.
References
Link | Resource |
---|---|
https://github.com/DayiliWaseem/CVE-2022-39196- | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-09-04 17:15
Updated : 2022-09-09 05:21
NVD link : CVE-2022-39196
Mitre link : CVE-2022-39196
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
blackboard
- blackboard_learn