← CVE Intelligence

CVE-2023-24834

WisdomGarden Tronclass ilearn - Broken Access Control PUBLISHED

Description (CNA)

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL.

Affected (CNA)

Vendor / productVersions
WisdomGarden / Tronclass ilearnaffected 2.3.2

CWE

CWE-639

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.