Vendor
learnhouse
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.3
LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API
LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can supply another user_id to the submissions grade endpoint or query submissio…