CVE-2023-24834 — WisdomGarden Tronclass ilearn - Broken Access Control
WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access fil…
Published: 2023-03-27 · CVSS: 6.5 · CVSS 3.1
WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7