Lucene search
MitreCVE-2022-28741HistorySep 09, 2022 - 4:15 p.m.
CVE-2022-28741
2022-09-0916:15:08
CWE-22
mitre
web.nvd.nist.gov
35
2
cve-2022-28741
enrich lms
lfi vulnerability
input validation
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.002
Percentile
59.4%
aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to missing input validation in v5.x
Affected configurations
Node
aenricha\+hrdRange5.0–5.4.1125v112
ORaenricha\+hrdRange5.5–5.5.1098v156
ORaenricha\+hrdRange5.6–5.6.1067v110
ORaenricha\+hrdRange6.0–7.0
References
Social References
More
Related
nvd
nvd
CVE-2022-28741
2022-09-09 16:15:08
cvelist
cvelist
CVE-2022-28741
2022-09-09 15:48:42
prion
prion
Input validation
2022-09-09 16:15:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.002
Percentile
59.4%
Related for CVE-2022-28741