Description
Insufficient capability checks made it possible for teachers to download users outside of their courses.
Remediation
References
Related Vulnerabilities
WordPress Plugin wp-publications Local File Inclusion (0.0)
MySQL CVE-2017-3456 Vulnerability (CVE-2017-3456)
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.13)
Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2019-20406)
Sqlite NULL Pointer Dereference Vulnerability (CVE-2018-8740)