Skip to content
OpenAdvisories

Vendor

learnhouse

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API

    LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can supply another user_id to the submissions grade endpoint or query submissio…