CVE-2024-13142 MEDIUM

CVE-2024-13142: ZeroWdd studentmanager RoleController. java submitAddRole cross site scripting

Vendor Zerowdd

Product studentmanager

Weakness CWE-79 · XSS

Published January 5, 2025

Last update January 6, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

Description

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely.

Key dates

Disclosure timeline

January 5, 2025 CVE published

January 6, 2025 Record updated