Skip to content
Threat Feed
Subscribe

Vendor

ClassroomIO

1 brief RSS
high advisory

Incorrect Authorization in ClassroomIO Lesson Routes

ClassroomIO versions 1.0.0 and earlier contain an authorization flaw in API routes allowing authenticated students to modify or delete arbitrary lesson content across courses.

ClassroomIO web-application authentication-bypass access-control
1c