CVE-2022-2808

High

Published: 02/12/2022(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2022-2808 is a vulnerability in Algan Software's Prens Student Information System that allows authorization bypass through Object Relational Mapping Injection. This issue affects versions before 2.1.11.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to user data, posing a significant security risk to the organization's information.

Recommendation

It is recommended to update the Prens Student Information System to version 2.1.11 or later to mitigate this vulnerability.

Other vulnerabilities in Prens Student Information System

CVE-2022-2807Critical
SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11.