Threats Tagged 'ghsa-f6m7-pgw8-2v88'

1 threat

Threats Tagged 'ghsa-f6m7-pgw8-2v88'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-114389chamilo-lms · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.3%2026-10-21CVE Database V5CVE-2026-114389 Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any authenticated user to obtain AI grading of other students' exam attempts. Attackers can enumerate exeId and questionId values sent to the open_answer_grade endpoint to expose other students' answers through feedback and consume AI quota. EPSS 0.3%Vulnerability chamilo #ghsa-f6m7-pgw8-2v88	CVE Database V5	2026-10-21

Showing 1–1 of 1 result