Description
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.
Unscored
CVE-2018-16970
EUVD-2018-8758GHSA-w9j7-w28p-w5pq
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course fi…
Published Sep 12, 2018 · Updated Aug 5, 2024 · Assigned by mitre