CVE-2023-49339

Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint.

Date published : 2024-02-12

https://github.com/3zizme/CVE-2023-49339/

https://www.ellucian.com/solutions/ellucian-banner