Lucene search
HistorySep 09, 2022 - 4:15 p.m.
CVE-2022-28741
enrich a+hrd
lfi
vulnerability
missing input validation
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
59.4%
aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to missing input validation in v5.x
Affected configurations
Node
aenricha\+hrdRange5.0–5.4.1125v112
ORaenricha\+hrdRange5.5–5.5.1098v156
ORaenricha\+hrdRange5.6–5.6.1067v110
ORaenricha\+hrdRange6.0–7.0
Related
cve
cve
CVE-2022-28741
2022-09-09 16:15:08
cvelist
cvelist
CVE-2022-28741
2022-09-09 15:48:42
prion
prion
Input validation
2022-09-09 16:15:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
59.4%
Related for NVD:CVE-2022-28741