Beveiligingsadvies

CVE-2022-37160

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-25 16:29:01

Laatst bijgewerkt 2024-08-03 10:21:33

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. By combining the XSS vulnerability present in several upload forms and a javascript request to the present API, it is possible to trigger the creation of a user with administrative rights by opening an SVG file as an administrator user.

← Alle CVE's bekijken Bekijk op cve.org ↗