CVE-2026-110467
MediumCVSS 4.3Summary
Tronclass developed by WisdomGarden has an Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
Risk Assessment
The risk includes violation of student privacy and integrity of the grading process, potentially leading to academic dishonesty.
Recommendation
Implement object-level access controls and validate user permissions before exposing grade data.
Other vulnerabilities in Tronclass
See all- CVE-2026-110466Medium
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
- CVE-2026-110465Medium
Tronclass developed by WisdomGarden has an Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Original NVD description (English source)
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS