Hsin-Che Wu

**Name of the Vulnerable Software and Affected Versions** Tronclass (affected versions not specified) **Description** Tronclass Learning Management System suffers from an Insecure Direct Object Reference issue. Remote attackers with regular privileges can manipulate a parameter to gain unauthorized access to files belonging to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.