Description
A hard-coded AWS IAM credentials vulnerability
in Koollab LMS allowed
an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing
sensitive data and enabling malicious content injection, job manipulation, or
email interception.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Three Learning | Koollab LMS | 5.3.2 | — |