CVE-2022-30760 | BDVDB-2026-177708 Detail

Description#

An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive student information (final grades, study courses, degrees) by changing the student ID parameter in the HTTP POST request to the FrontControllerSS endpoint.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wiki.ihb-eg.de/doku.php/releasenotes/fn2web2.04.09
https://homepage.ruhr-uni-bochum.de/Christian.Krug-q97/CVE-2022-30760.html

Exploit#

No public exploit known

History#

Version 12022-06-09Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.