Vendor
PlayEdu
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.3
PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints
PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and at…