CVE Vulnerabilities

CVE-2024-27710

Improper Privilege Management

Published: Jul 05, 2024 | Modified: Apr 16, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Eskooly Eskooly * 3.0 (including)

Potential Mitigations

References