CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.
Explanation of Vulnerability in Simple Terms
MasterStudy LMS versions up to 3.6.20 contain an exposure of sensitive information vulnerability. An authenticated administrator can read confidential data that should be restricted. The vulnerability requires high-level privileges and does not allow modification or deletion of data. Update to a version newer than 3.6.20 to remediate.
What an attacker can do
Read sensitive information accessible only to administrators.
Potential impact on your site
Administrators with malicious intent can access confidential data not intended for their role.
Conditions required to exploit
Attacker must have administrator-level access to the LMS.
Key dates
External resources
