Vulnerabilities

TI-2018-12124 CVE-2018-16971 · GHSA-cjhc-275v-r97h

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference…

LOW 21

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00649 Published 2018-09-12 No fix listed CWE-639

TI-2018-12123 CVE-2018-16970 · GHSA-w9j7-w28p-w5pq

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference…

LOW 21

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00733 Published 2018-09-12 No fix listed CWE-538

Vulnerabilities

Filters

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference…

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference…