Description

It was possible for a student to view their quiz grade before it had been released, using a quiz web service.

Remediation

References

CVE-2021-40695

Related Vulnerabilities

ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0247)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5577)

WordPress Plugin CYSTEME Finder, the admin files explorer Multiple Vulnerabilities (1.3)

WordPress Plugin Simple Ads Manager Multiple Vulnerabilities (2.6.96)

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5400)

Severity

Medium

Classification

CVE-2021-40695 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities