Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-120199 1 Learnhouse 1 Learnhouse 2026-11-06 4.3 Medium
LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can supply another user_id to the submissions grade endpoint or query submission read functions to view other students' work, grades and instructor feedback.