Vulnerabilities

TI-2024-11417 CVE-2024-12307 · GHSA-9297-f627-mwjv

Function-Level Access Control Vulnerability Allows Unauthorized Modification of Student Data in Unifiedtransform

MEDIUM 53

A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows teachers to modify student personal data without proper authorization.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00244 Published 2024-12-09 No fix listed CWE-284

TI-2024-11416 CVE-2024-12306 · GHSA-mpjr-8p76-gxrv

Access Control Vulnerabilities Allow Unauthorized Access to User Profiles in Unifiedtransform

MEDIUM 53

Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthorized access to personal information of students and teachers.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2024-12-09 No fix listed CWE-284

TI-2024-11415 CVE-2024-12305 · GHSA-3fh3-9f74-h562

Object-Level Access Control Vulnerability Allows Unauthorized Access to Student Grades in Unifiedtransform

MEDIUM 53

An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2024-12-09 No fix listed CWE-639

Vulnerabilities

Filters

Function-Level Access Control Vulnerability Allows Unauthorized Modification of Student Data in Unifiedtransform

Access Control Vulnerabilities Allow Unauthorized Access to User Profiles in Unifiedtransform

Object-Level Access Control Vulnerability Allows Unauthorized Access to Student Grades in Unifiedtransform