PT-2026-134518
CVE-2026-120199
·
تاريخ النشر
2026-10-31
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can supply another user id to the submissions grade endpoint or query submission read functions to view other students' work, grades and instructor feedback.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾