Security Advisory

CVE-2018-16970

4.3
MEDIUM

Vulnerability Description

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.
Published Date September 12, 2018
Official Source NIST NVD Advisory