Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-24834

WisdomGarden Tronclass ilearn - Broken Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WisdomGarden Tronclass ilearn

  • 2.3.2affected

References