Polarnl vulnerabilities
We track 6 vulnerabilities in Polarnl products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on April 7, 2026.
Latest Polarnl vulnerabilities
- 8.8 High severity
PolarLearn: Improper Authentication
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, POST /api/v1/auth/sign-in creates a valid session for banned accounts before verifying the supplied password. That session is then accepted across authenticated /api routes,
- 8.8 High severity
PolarLearn: Improper Authorization
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, setCustomPassword(userId, password) and deleteUser(userId) in the account-management module used an inverted admin check. Because of the inverted condition, authenticated no
- 7.5 High severity
PolarLearn: Improper Authorization
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss://polarlearn.nl/api/v1/ws can be used without logging in. An unauthenticated client can subscribe to any group chat by providing a group UUID
- 7.5 High severity
PolarLearn: Exposure of Sensitive Information to an Unauthorized Actor
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, a timing attack vulnerability in the sign-in process allows unauthenticated attackers to determine if a specific email address is registered on the platform. By measuring th
- 8.1 High severity
PolarLearn: Cross-Site Request Forgery
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, the OAuth 2.0 implementation for GitHub and Google login providers is vulnerable to Login Cross-Site Request Forgery (CSRF). The application fails to implement and verify th
- 7.1 High severity
PolarLearn is a free and open-source learning program.
PolarLearn is a free and open-source learning program. Prior to version 0-PRERELEASE-15, the vote API route (`POST /api/v1/forum/vote`) trusts the JSON body’s `direction` value without runtime validation. TypeScript types are not enforced at runtime, so an att