Описание
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint.
EPSS
Процентиль: 12%
0.00216
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 6.5
github
3 дня назад
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint.
EPSS
Процентиль: 12%
0.00216
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-287