CVEvulnerability

CVE-2026-63240

4.3 MEDIUM Published 2026-07-29 Modified 2026-10-23 Official page ↗
Status
Deferred
Published
2026-07-29
Last modified
2026-10-23
Assigner
5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
CVSS 3.1 (5f57b9bf-260d-4433-bf07-b6a79e9bb7d4)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200

Description

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments.

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References