GHSA-6hr5-7mj9-8pm2CriticalCVSS 9.8
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS)...
🔗 CVE IDs covered (1)
📋 Description
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.