Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS allows Authentication Bypass.This issue affects CoSchool LMS: from n/a through 1.2.
History

Fri, 13 Dec 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 13 Dec 2024 14:30:00 +0000

Type Values Removed Values Added
Description Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS allows Authentication Bypass.This issue affects CoSchool LMS: from n/a through 1.2.
Title WordPress CoSchool LMS plugin <= 1.2 - Account Takeover vulnerability
Weaknesses CWE-288
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2024-12-13T14:25:09.018Z

Updated: 2024-12-13T15:30:13.357Z

Reserved: 2024-12-02T12:04:29.185Z

Link: CVE-2024-54296

cve-icon Vulnrichment

Updated: 2024-12-13T15:30:09.882Z

cve-icon NVD

Status : Received

Published: 2024-12-13T15:15:33.693

Modified: 2024-12-13T15:15:33.693

Link: CVE-2024-54296

cve-icon Redhat

No data.