ClassroomIO vulnerabilities
2 known vulnerabilities in ClassroomIO from Classroomio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score
Latest first
- 7.1 High severity
ClassroomIO: Incorrect Authorization
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change ti
- 9.1 Critical severity
Classroomio: Missing Authorization
An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.