This vulnerability in Koollab LMS (version 5.3.2) involves a post-authentication SQL injection (CWE-89) through the face-to-face runs update endpoint. An attacker with valid credentials can leverage an error-based SQL injection technique to extract the full application database contents. Additionally, the attacker can retrieve valid JWT tokens, which can be used to hijack user accounts. The CVSS 3.1 base score is 8.1, indicating high severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality and integrity but not availability. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild.

An authenticated attacker can read the entire application database and obtain valid JWT tokens, leading to potential account takeover and exposure of sensitive data. The vulnerability compromises confidentiality and integrity of the system but does not affect availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected endpoint to trusted users only and monitor for suspicious activity involving JWT tokens. Consider additional application-layer protections such as input validation and parameterized queries if possible.