Description
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Remediation
References
Related Vulnerabilities
WordPress Plugin Comment Rating 'path' Parameter Cross-Site Scripting (2.9.20)
WordPress Plugin Contact Form 7 Security Bypass (3.7.1)
WordPress Plugin WP Mail SMTP by WPForms Unspecified Vulnerability (0.9.5)
WordPress Plugin PHP Analytics Arbitrary File Upload (1.0.0.2)
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26271)