Description
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.
Unscored
CVE-2018-16971
EUVD-2018-8759GHSA-cjhc-275v-r97h
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course cont…
Published Sep 12, 2018 · Updated Aug 5, 2024 · Assigned by mitre