HexBrain

LinkedIn · Report #1892888

Users can access exams in course without having to subscribe to PREMIUM

Validstatus
mediumseverity
64upvotes
10 Jan 2024disclosed

Summary

The researcher was able to identify an Improper Access Control issue in the Learning Exams section, allowing a malicious user without a premium account to successfully take exams and complete them.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original