Skip to content
OpenAdvisories

Vendor

Erudika

14 known vulnerabilities.

Products

scoold 9 para 2 erudika/para 2 erudika/scoold 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2024-50334 Scanner template

    Semicolon Path Injection on API /api;/config

    Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive con…

    Erudika scoold