Assessment Placipy
Approved changes feed: RSS · Atom
cpe:2.3:a:praskla-technology:assessment-placipy:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Praskla Technology (4ec231c1-d59f-5153-ad40-bda9c8d33762) |
|---|---|
| Product | Assessment Placipy (f103fc71-70a3-5fe1-ae61-2449f8137a69) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25876 |
vulnerable | 2026-06-08 07:53:20.567891 |
PlaciPy is Missing Authorization on Assessment Results Endpoint
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/results.routes.ts verify authentication but fails to enforce object-level authorization (ownership checks). For example, this can be used to return all results for an assessment.
Published: 2026-02-09T20:48:50.823Z
Updated: 2026-02-10T15:59:14.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25875 |
vulnerable | 2026-06-08 07:53:20.567489 |
PlaciPy Admin Privilege Escalation via Trusted JWT Claims
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorization middleware trusts client-controlled JWT claims (role and scope) without enforcing server-side role verification.
Published: 2026-02-09T21:07:15.346Z
Updated: 2026-02-10T15:58:19.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25814 |
vulnerable | 2026-06-08 07:53:20.511615 |
NoSQL Injection Risk via Unsanitized Query Parameters
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB query/filter construction without validation or sanitization.
Published: 2026-02-09T21:05:50.295Z
Updated: 2026-02-10T15:58:25.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25813 |
vulnerable | 2026-06-08 07:53:20.511146 |
PlaciPy Exposes Sensitive Data via Application Logs
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction.
Published: 2026-02-09T21:04:46.261Z
Updated: 2026-02-10T15:58:30.406Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25812 |
vulnerable | 2026-06-08 07:53:20.510791 |
PlaciPy is Missing CSRF Protection on State-Changing Endpoints
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism.
Published: 2026-02-09T21:03:36.696Z
Updated: 2026-02-10T15:58:36.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25811 |
vulnerable | 2026-06-08 07:53:20.510242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25810 |
vulnerable | 2026-06-08 07:53:20.509729 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25809 |
vulnerable | 2026-06-08 07:53:20.509401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25806 |
vulnerable | 2026-06-08 07:53:20.504510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25753 |
vulnerable | 2026-06-08 07:53:20.292401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.