CVE-2026-110466
MediumCVSS 4.3Summary
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
Risk Assessment
The risk includes breach of student anonymity, potentially leading to privacy violations and loss of trust in the grading system.
Recommendation
Strengthen anonymization mechanisms and access controls to prevent bypassing restrictions.
Other vulnerabilities in Tronclass
See all- CVE-2026-110467Medium
Tronclass developed by WisdomGarden has an Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
- CVE-2026-110465Medium
Tronclass developed by WisdomGarden has an Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Original NVD description (English source)
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS