CVE-2022-3434

CVE Details

Release Date:

2022-10-08

Description

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210356.

See more information about CVE-2022-3434 from MITRE CVE dictionary and NIST NVD

CVSS v3.0 metrics

NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.

Base Score:	5.4	Base Metrics:	AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Access Vector:	Network	Attack Complexity:	Low
Privileges Required:	Low	User Interaction:	Required
Scope:	Changed	Confidentiality Impact:	Low
Integrity Impact:	Low	Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle Linux version 7 (kernel-uek)	ELSA-2023-12566	2023-07-04

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team