Skip to content
OpenAdvisories

Vendor

classroomio

3 known vulnerabilities.

Products

ClassroomIO 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-124551

    ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpoint

    ClassroomIO through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users of any organization to clone other tenants' courses via the POST /course/:courseId/clone endpoint. Attackers who know a target course id can copy its sect…

    classroomio ClassroomIO
  • Medium 6.4
    CVE-2026-111368

    ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes

    ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other courses. Attackers can supply their own course id with another cou…

    classroomio ClassroomIO