CVE-2024-12305

An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the studentid parameter in the marks viewing endpoint. The...

PT-2024-17535

Name of the Vulnerable Software and Affected Versions Unifiedtransform versions 2.0 and earlier Description An object-level access control issue allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the student id parameter in the...

CVE-2024-12305: Authorization Bypass Through User-Controlled Key

An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the studentid parameter in the marks viewing endpoint. The...