CVE-2026-110465
MediumCVSS 4.3Summary
Tronclass developed by WisdomGarden has an Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Risk Assessment
The risk includes grade manipulation, potentially leading to academic dishonesty and compromise of grading integrity.
Recommendation
Implement object-level access controls and validate user permissions before modifying grade data.
Other vulnerabilities in Tronclass
See all- CVE-2026-110467Medium
Tronclass developed by WisdomGarden has an Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
- CVE-2026-110466Medium
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
Original NVD description (English source)
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS