Filtered by vendor Yetanalytics Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-26140 1 Yetanalytics 2 Lrs, Sql Lrs 2025-02-05 4.6 Medium
com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS, a maliciously crafted xAPI statement could be used to perform script or other tag injection in the LRS Statement Browser. The problem is patched in version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS. No known workarounds exist.