PT-2023-12533 · Ubit Information Technologies · Ubit Information Technologies Student Information Management System

Oğuzhan Kara · Published 2023-03-07 · Updated 2023-09-03 · CVE-2021-44197

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UBIT Information Technologies Student Information Management System versions before 20211126

Description The issue is related to Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS. This allows for potential exploitation through malicious script injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions before 20211126, update to a version released after 20211126 to resolve the issue. As a temporary workaround, consider implementing proper input validation and sanitization to minimize the risk of exploitation. Restrict access to sensitive areas of the Student Information Management System to minimize the risk of exploitation until a patch is available.

Fix

XSS

Weakness Enumeration

CWE-79

CWE-80

Related Identifiers

CVE-2021-44197

Affected Products

Ubit Information Technologies Student Information Management System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-44197 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44197 · Vendor Advisory
• https://usom.gov.tr/bildirim/tr-23-0131 · Note
• https://t.me/cvenotify/45725 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0131 · Note
• https://t.me/cibsecurity/59562 · Telegram Post
• https://t.me/cvenotify/46898 · Telegram Post