CVEs-PoC/2019/CVE-2019-12834.md

CVE-2019-12834

Description

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI.

POC

Reference

• https://github.com/miruser/Roche-CVEs/blob/master/CVE-2019-12834.md

Github

• https://github.com/kiseru-io/clair-sec-scanner
• https://github.com/rochesecurity/Roche-CVEs