Design/Logic Flaw

2022-09-0500:15:00

PRIOn knowledge base

www.prio-n.com

blackboard learn 1.10.1

design flaw

logic flaw

unauthorized access

file access

web application security

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL.

CPENameOperatorVersion
blackboard_learneq1.10.1

CPE	Name	Operator	Version
	blackboard_learn	eq	1.10.1

References

github.com/DayiliWaseem/CVE-2022-39196-