Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-63240

Information disclosure vulnerability

Description

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Three Learning Koollab LMS

Default version status: unaffected

  • 5.3.2affected

References