CVE-2018-16971

Name of the Vulnerable Software and Affected Versions Wisetail Learning Ecosystem (LE) versions through 4.11.6

Description The issue allows for insecure direct object reference (IDOR) attacks, enabling access to non-purchased course contents, such as quizzes or tests, by modifying the id parameter.

Recommendations For versions through 4.11.6, avoid using the modified id parameter to access non-purchased course contents until a fix is available. As a temporary workaround, consider restricting access to the affected course contents to minimize the risk of exploitation.