Skip to content
OpenAdvisories

Vendor

PlayEdu

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints

    PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and at…