Search vulnerabilities

Results 2

Export CSV
CVE-2018-16971

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2018-16970

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors