This vulnerability in Koollab LMS (version 5.3.2) permits authenticated learners to access correct quiz answers via the course status endpoint without completing the quiz as intended. The flaw results in unauthorized information disclosure, specifically leaking correct answers that should remain confidential until assessment completion. The issue is categorized under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). No official patch or remediation guidance is currently available from the vendor, and there are no known exploits in the wild.

The vulnerability allows unauthorized disclosure of correct quiz answers to authenticated learners, undermining the integrity of assessments. It does not affect system availability or integrity beyond the exposure of sensitive information. There is no indication of privilege escalation or remote unauthenticated exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the course status endpoint to trusted users only or implement additional access controls to prevent unauthorized answer disclosure.