Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-63230

Pre-authentication error-based SQL injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CSA

Description

A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover, via the SCORM report endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Three Learning Koollab LMS

Default version status: unaffected

  • 5.3.2affected

References