CVE-2026-111368

The ClassroomIO application (versions through 1.0.0 ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the Hono API course submission routes. The root cause allows authenticated course tutors or admins to access and manipulate data from other courses by providing their own...