Vulnerability feed

Executive summary

An authentication bypass flaw in WizLearn Technologies' Learning Management System (LMS) may let an unauthenticated attacker gain unauthorized access to user accounts and full administrative control of the platform. The advisory does not state a severity score. The advisory does not state a vendor recommendation or fix.

Technical summary

The advisory describes an authentication bypass in the WizLearn LMS that lets a remote, unauthenticated attacker bypass both password authentication and the OAuth authentication flow by sending a specially crafted POST request. No user interaction or other preconditions are stated. Successful exploitation could yield unauthorized access to user accounts and full administrative control of the LMS. Affected versions, fixed versions, workarounds, CVSS score, exploitation status, and detection guidance are not stated in the advisory.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affects

WizLearn Technologies Pte. Ltd.WizLearn TechnologiesWizLearn Technologies Pte. Ltd. Learning Management SystemWizLearn Technologies Learning Management System (LMS)