Skip to content
OpenAdvisories

Vendor

classroomio

3 known vulnerabilities.

Products

ClassroomIO 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-111369

    ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes

    ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change t…

    classroomio ClassroomIO