Description
In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI.
High · 7.3
CVE-2019-12834
EUVD-2019-4414GHSA-67q7-73hh-wrm4
In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INF…
Published Jul 16, 2019 · Updated Aug 4, 2024 · Assigned by mitre