PT-2023-12533 · Ubit Information Technologies · Ubit Information Technologies Student Information Management System

Oğuzhan Kara · Publicado 2023-03-07 · Atualizado 2023-09-03 · CVE-2021-44197

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UBIT Information Technologies Student Information Management System versions before 20211126

Description The issue is related to Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS. This allows for potential exploitation through malicious script injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions before 20211126, update to a version released after 20211126 to resolve the issue. As a temporary workaround, consider implementing proper input validation and sanitization to minimize the risk of exploitation. Restrict access to sensitive areas of the Student Information Management System to minimize the risk of exploitation until a patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

CWE-80

Identificadores relacionados

CVE-2021-44197

Produtos afetados

Ubit Information Technologies Student Information Management System

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-44197 · Nota de Segurança
• https://usom.gov.tr/bildirim/tr-23-0131 · Nota
• https://osv.dev/vulnerability/CVE-2021-44197 · Aviso do Fabricante
• https://t.me/cvenotify/45725 · Publicação no Telegram
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0131 · Nota
• https://t.me/cibsecurity/59562 · Publicação no Telegram
• https://t.me/cvenotify/46898 · Publicação no Telegram