CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-37160

Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. By combining the XSS vulnerability present in several upload forms and a javascript request to the present API, it is possible to trigger the creation of a user with administrative rights by opening an SVG file as an administrator user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.1%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2022-37160

Claroline » Claroline » Version: 1.10

cpe:2.3:a:claroline:claroline:1.10
Claroline » Claroline » Version: 1.11

cpe:2.3:a:claroline:claroline:1.11
Claroline » Claroline » Version: 1.11.2

cpe:2.3:a:claroline:claroline:1.11.2
Claroline » Claroline » Version: 1.11.3

cpe:2.3:a:claroline:claroline:1.11.3
Claroline » Claroline » Version: 1.11.4

cpe:2.3:a:claroline:claroline:1.11.4
Claroline » Claroline » Version: 1.11.5

cpe:2.3:a:claroline:claroline:1.11.5
Claroline » Claroline » Version: 1.11.6

cpe:2.3:a:claroline:claroline:1.11.6
Claroline » Claroline » Version: 1.11.7

cpe:2.3:a:claroline:claroline:1.11.7
Claroline » Claroline » Version: 1.11.8

cpe:2.3:a:claroline:claroline:1.11.8
Claroline » Claroline » Version: 1.11.9

cpe:2.3:a:claroline:claroline:1.11.9
Claroline » Claroline » Version: 1.9

cpe:2.3:a:claroline:claroline:1.9
Claroline » Claroline » Version: 10.0.0

cpe:2.3:a:claroline:claroline:10.0.0
Claroline » Claroline » Version: 10.0.1

cpe:2.3:a:claroline:claroline:10.0.1
Claroline » Claroline » Version: 12.0.0

cpe:2.3:a:claroline:claroline:12.0.0
Claroline » Claroline » Version: 13.0.1

cpe:2.3:a:claroline:claroline:13.0.1
Claroline » Claroline » Version: 13.0.10

cpe:2.3:a:claroline:claroline:13.0.10
Claroline » Claroline » Version: 13.0.11

cpe:2.3:a:claroline:claroline:13.0.11
Claroline » Claroline » Version: 13.0.12

cpe:2.3:a:claroline:claroline:13.0.12
Claroline » Claroline » Version: 13.0.13

cpe:2.3:a:claroline:claroline:13.0.13
Claroline » Claroline » Version: 13.0.14

cpe:2.3:a:claroline:claroline:13.0.14
Claroline » Claroline » Version: 13.0.15

cpe:2.3:a:claroline:claroline:13.0.15
Claroline » Claroline » Version: 13.0.16

cpe:2.3:a:claroline:claroline:13.0.16
Claroline » Claroline » Version: 13.0.17

cpe:2.3:a:claroline:claroline:13.0.17
Claroline » Claroline » Version: 13.0.18

cpe:2.3:a:claroline:claroline:13.0.18
Claroline » Claroline » Version: 13.0.19

cpe:2.3:a:claroline:claroline:13.0.19
Claroline » Claroline » Version: 13.0.2

cpe:2.3:a:claroline:claroline:13.0.2
Claroline » Claroline » Version: 13.0.20

cpe:2.3:a:claroline:claroline:13.0.20
Claroline » Claroline » Version: 13.0.21

cpe:2.3:a:claroline:claroline:13.0.21
Claroline » Claroline » Version: 13.0.22

cpe:2.3:a:claroline:claroline:13.0.22
Claroline » Claroline » Version: 13.0.23

cpe:2.3:a:claroline:claroline:13.0.23
Claroline » Claroline » Version: 13.0.24

cpe:2.3:a:claroline:claroline:13.0.24
Claroline » Claroline » Version: 13.0.25

cpe:2.3:a:claroline:claroline:13.0.25
Claroline » Claroline » Version: 13.0.26

cpe:2.3:a:claroline:claroline:13.0.26
Claroline » Claroline » Version: 13.0.27

cpe:2.3:a:claroline:claroline:13.0.27
Claroline » Claroline » Version: 13.0.28

cpe:2.3:a:claroline:claroline:13.0.28
Claroline » Claroline » Version: 13.0.29

cpe:2.3:a:claroline:claroline:13.0.29
Claroline » Claroline » Version: 13.0.3

cpe:2.3:a:claroline:claroline:13.0.3
Claroline » Claroline » Version: 13.0.30

cpe:2.3:a:claroline:claroline:13.0.30
Claroline » Claroline » Version: 13.0.31

cpe:2.3:a:claroline:claroline:13.0.31
Claroline » Claroline » Version: 13.0.32

cpe:2.3:a:claroline:claroline:13.0.32
Claroline » Claroline » Version: 13.0.33

cpe:2.3:a:claroline:claroline:13.0.33
Claroline » Claroline » Version: 13.0.34

cpe:2.3:a:claroline:claroline:13.0.34
Claroline » Claroline » Version: 13.0.35

cpe:2.3:a:claroline:claroline:13.0.35
Claroline » Claroline » Version: 13.0.36

cpe:2.3:a:claroline:claroline:13.0.36
Claroline » Claroline » Version: 13.0.37

cpe:2.3:a:claroline:claroline:13.0.37
Claroline » Claroline » Version: 13.0.38

cpe:2.3:a:claroline:claroline:13.0.38
Claroline » Claroline » Version: 13.0.39

cpe:2.3:a:claroline:claroline:13.0.39
Claroline » Claroline » Version: 13.0.4

cpe:2.3:a:claroline:claroline:13.0.4
Claroline » Claroline » Version: 13.0.40

cpe:2.3:a:claroline:claroline:13.0.40
Claroline » Claroline » Version: 13.0.41

cpe:2.3:a:claroline:claroline:13.0.41
Claroline » Claroline » Version: 13.0.42

cpe:2.3:a:claroline:claroline:13.0.42
Claroline » Claroline » Version: 13.0.43

cpe:2.3:a:claroline:claroline:13.0.43
Claroline » Claroline » Version: 13.0.44

cpe:2.3:a:claroline:claroline:13.0.44
Claroline » Claroline » Version: 13.0.45

cpe:2.3:a:claroline:claroline:13.0.45
Claroline » Claroline » Version: 13.0.46

cpe:2.3:a:claroline:claroline:13.0.46
Claroline » Claroline » Version: 13.0.47

cpe:2.3:a:claroline:claroline:13.0.47
Claroline » Claroline » Version: 13.0.48

cpe:2.3:a:claroline:claroline:13.0.48
Claroline » Claroline » Version: 13.0.5

cpe:2.3:a:claroline:claroline:13.0.5
Claroline » Claroline » Version: 13.0.6

cpe:2.3:a:claroline:claroline:13.0.6
Claroline » Claroline » Version: 13.0.7

cpe:2.3:a:claroline:claroline:13.0.7
Claroline » Claroline » Version: 13.0.8

cpe:2.3:a:claroline:claroline:13.0.8
Claroline » Claroline » Version: 13.0.9

cpe:2.3:a:claroline:claroline:13.0.9
Claroline » Claroline » Version: 13.1.0

cpe:2.3:a:claroline:claroline:13.1.0
Claroline » Claroline » Version: 13.1.1

cpe:2.3:a:claroline:claroline:13.1.1
Claroline » Claroline » Version: 13.1.2

cpe:2.3:a:claroline:claroline:13.1.2
Claroline » Claroline » Version: 13.1.3

cpe:2.3:a:claroline:claroline:13.1.3
Claroline » Claroline » Version: 13.1.4

cpe:2.3:a:claroline:claroline:13.1.4
Claroline » Claroline » Version: 13.1.5

cpe:2.3:a:claroline:claroline:13.1.5
Claroline » Claroline » Version: 13.1.6

cpe:2.3:a:claroline:claroline:13.1.6
Claroline » Claroline » Version: 13.2.0

cpe:2.3:a:claroline:claroline:13.2.0
Claroline » Claroline » Version: 13.2.1

cpe:2.3:a:claroline:claroline:13.2.1
Claroline » Claroline » Version: 13.2.2

cpe:2.3:a:claroline:claroline:13.2.2
Claroline » Claroline » Version: 13.3.0

cpe:2.3:a:claroline:claroline:13.3.0
Claroline » Claroline » Version: 13.3.1

cpe:2.3:a:claroline:claroline:13.3.1
Claroline » Claroline » Version: 13.3.2

cpe:2.3:a:claroline:claroline:13.3.2
Claroline » Claroline » Version: 13.3.3

cpe:2.3:a:claroline:claroline:13.3.3
Claroline » Claroline » Version: 13.3.4

cpe:2.3:a:claroline:claroline:13.3.4
Claroline » Claroline » Version: 13.3.5

cpe:2.3:a:claroline:claroline:13.3.5
Claroline » Claroline » Version: 13.3.6

cpe:2.3:a:claroline:claroline:13.3.6
Claroline » Claroline » Version: 13.3.7

cpe:2.3:a:claroline:claroline:13.3.7
Claroline » Claroline » Version: 13.3.8

cpe:2.3:a:claroline:claroline:13.3.8
Claroline » Claroline » Version: 13.4.0

cpe:2.3:a:claroline:claroline:13.4.0
Claroline » Claroline » Version: 13.4.1

cpe:2.3:a:claroline:claroline:13.4.1
Claroline » Claroline » Version: 13.4.2

cpe:2.3:a:claroline:claroline:13.4.2
Claroline » Claroline » Version: 13.4.3

cpe:2.3:a:claroline:claroline:13.4.3
Claroline » Claroline » Version: 13.4.4

cpe:2.3:a:claroline:claroline:13.4.4
Claroline » Claroline » Version: 13.4.5

cpe:2.3:a:claroline:claroline:13.4.5
Claroline » Claroline » Version: 13.4.6

cpe:2.3:a:claroline:claroline:13.4.6
Claroline » Claroline » Version: 13.4.7

cpe:2.3:a:claroline:claroline:13.4.7
Claroline » Claroline » Version: 13.5.0

cpe:2.3:a:claroline:claroline:13.5.0
Claroline » Claroline » Version: 13.5.1

cpe:2.3:a:claroline:claroline:13.5.1
Claroline » Claroline » Version: 13.5.2

cpe:2.3:a:claroline:claroline:13.5.2
Claroline » Claroline » Version: 13.5.3

cpe:2.3:a:claroline:claroline:13.5.3
Claroline » Claroline » Version: 13.5.4

cpe:2.3:a:claroline:claroline:13.5.4
Claroline » Claroline » Version: 13.5.5

cpe:2.3:a:claroline:claroline:13.5.5
Claroline » Claroline » Version: 13.5.6

cpe:2.3:a:claroline:claroline:13.5.6
Claroline » Claroline » Version: 13.5.7

cpe:2.3:a:claroline:claroline:13.5.7
Claroline » Claroline » Version: 6.0.0

cpe:2.3:a:claroline:claroline:6.0.0
Claroline » Claroline » Version: 6.0.1

cpe:2.3:a:claroline:claroline:6.0.1
Claroline » Claroline » Version: 6.0.2

cpe:2.3:a:claroline:claroline:6.0.2
Claroline » Claroline » Version: 6.0.3

cpe:2.3:a:claroline:claroline:6.0.3
Claroline » Claroline » Version: 7.0.0

cpe:2.3:a:claroline:claroline:7.0.0
Claroline » Claroline » Version: 8.0.0

cpe:2.3:a:claroline:claroline:8.0.0
Claroline » Claroline » Version: 8.0.2

cpe:2.3:a:claroline:claroline:8.0.2
Claroline » Claroline » Version: 8.0.3

cpe:2.3:a:claroline:claroline:8.0.3
Claroline » Claroline » Version: 9.0.0

cpe:2.3:a:claroline:claroline:9.0.0
Claroline » Claroline » Version: 9.0.1

cpe:2.3:a:claroline:claroline:9.0.1
Claroline » Claroline » Version: 9.1.0

cpe:2.3:a:claroline:claroline:9.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-37160

Products

Pricing

Contact Us