Orta CVSS 5.4
CVE-2026-30368: CVE-2026-30368: hatalı yetkilendirme
Açıklama (NVD)
A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices.
Özet bilgiler
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N - EPSS
- %0,35 (yüzdelik 29)
- CWE
- CWE-863
- Yama
- Yok / bilinmiyor