medium4.3
CVE-2018-16970
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified i…
Impact
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wisetail | Learning Management System | through 4.11.6 |