CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through <= 3.6.15.
Explanation of Vulnerability in Simple Terms
MasterStudy LMS versions up to 3.6.15 lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can change data integrity without needing special interaction. The vulnerability affects the core functionality of the learning management system and requires an active user account to exploit.
What an attacker can do
Modify or alter content and data within the LMS that the attacker should not have permission to change.
Potential impact on your site
Unauthorized users can alter course content, grades, or other LMS data, compromising the integrity of your learning platform.
Conditions required to exploit
Attacker must have a valid user account with at least low-level privileges on the site.
Key dates
External resources
