PT-2026-28480 · Sakai · Sakai

CVE-2026-33402 · Publicado 2026-03-26 · Atualizado 2026-03-27

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sakai versions 23.0 through 23.4 Sakai versions 25.0 through 25.1

Description Sakai is a Collaboration and Learning Environment (CLE). Group titles and descriptions can contain cross-site scripting scripts. The issue affects versions 23.0 through 23.4 and 25.0 through 25.1. As a workaround, the SAKAI SITE GROUP table can be checked for titles and descriptions containing malicious scripts.

Recommendations Update to Sakai version 23.5 or later. Update to Sakai version 25.2 or later. As a workaround, check the SAKAI SITE GROUP table for titles and descriptions that contain potentially malicious scripts.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-33402

GHSA-6G62-3898-HPVM

Produtos afetados

Sakai

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33402.json · Exploit
• https://github.com/sakaiproject/sakai/security/advisories/GHSA-6g62-3898-hpvm · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2037513431130026042 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-33402 · Nota de Segurança
• https://sakaiproject.atlassian.net/browse/SAK-52311 · Nota
• https://osv.dev/vulnerability/CVE-2026-33402 · Aviso do Fabricante
• https://twitter.com/infoflowcloud/status/2037515436531515497 · Publicação no Twitter