The vulnerability in Koollab LMS version 5.3.2 permits authenticated learners to access correct quiz answers through the course status endpoint without completing the assessment as intended. This results in unauthorized information disclosure that undermines assessment integrity. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, and limited confidentiality impact. No vendor advisory or patch is currently available, and the product is not a cloud service.

An authenticated user can obtain correct quiz answers prematurely, compromising the integrity of assessments. This may affect the reliability of learner evaluations and potentially undermine trust in the LMS's assessment process. There is no indication of impact on system availability or integrity beyond information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the course status endpoint to trusted users only and monitor for suspicious activity related to quiz answer retrieval. No official patch or workaround has been published by the vendor as of now.