| Package | Affected versions | Patched versions |
|---|---|---|
| banner | ≤ 9.17 |
Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free