Description
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Remediation
References
Related Vulnerabilities
Java Unspesificed Vulnerability (CVE-2019-2422)
WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)
WordPress Plugin YaySMTP-Simple WP SMTP Mail Cross-Site Scripting (2.2)
Liferay DXP Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2025-43766)
WordPress Plugin WP Open Graph Cross-Site Request Forgery (1.6.1)