Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/02/24 7:29 a.m.•19 views

CVE-2026-2997

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course...

6.5CVSS5.4AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/23 3:15 a.m.•25 views

CVE-2026-2997

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course...

6.5CVSS0.00303EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/23 1:55 a.m.•11 views

CVE-2026-2997 WisdomGarden|Tronclass - Insecure Direct Object Reference

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course...

6.5CVSS5.9AI score0.00303EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/23 1:55 a.m.•69 views

CVE-2026-2997

CVE-2026-2997 : WisdomGarden’s Tronclass contains an insecure direct object reference. An authenticated remote attacker who learns a course ID can modify a parameter to obtain a course invitation code and join any course. Public exploitation details are not provided in the connected documents; re...

6.5CVSS5.9AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•39 views

PT-2026-21493

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course...

6.5CVSS5.6AI score0.00303EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•3 views

CVE-2026-2997: Authorization Bypass Through User-Controlled Key

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course...

6.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder