We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-3036

yzk2356911358 StudentServlet-JSP Student Management cross site scripting



Description

EN DE

A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Es wurde eine problematische Schwachstelle in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 gefunden. Es geht dabei um eine nicht klar definierte Funktion der Komponente Student Management Handler. Durch Manipulation des Arguments Name mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. Dieses Produkt setzt Rolling Releases ein. Aus diesem Grund sind Details zu betroffenen oder zu aktualisierende Versionen nicht verfügbar.

Reserved 2025-03-31 | Published 2025-03-31 | Updated 2025-04-01 | Assigner VulDB


MEDIUM: 4.8CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
LOW: 2.4CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
LOW: 2.4CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
3.3AV:N/AC:L/Au:M/C:N/I:P/A:N

Problem types

Cross Site Scripting

Code Injection

Product status

cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5
affected

d4d7a0643f1dae908a4831206f2714b21820f991
affected

Timeline

2025-03-31:Advisory disclosed
2025-03-31:VulDB entry created
2025-03-31:VulDB entry last update

Credits

TTTlw1024 (VulDB User) reporter

References

vuldb.com/?id.302097 (VDB-302097 | yzk2356911358 StudentServlet-JSP Student Management cross site scripting) vdb-entry technical-description

vuldb.com/?ctiid.302097 (VDB-302097 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/?submit.524630 (Submit #524630 | yzk2356911358 StudentServlet-JSP null xss) third-party-advisory

github.com/yzk2356911358/StudentServlet-JSP/issues/2 issue-tracking

github.com/yzk2356911358/StudentServlet-JSP/issues/2 exploit issue-tracking

cve.org (CVE-2025-3036)

nvd.nist.gov (CVE-2025-3036)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-3036

Support options

Helpdesk Chat, Email, Knowledgebase