WisdomGarden Tronclass Insecure Direct Object Reference Vulnerability

A vulnerability allowing Insecure Direct Object Reference has been identified in Tronclass developed by WisdomGarden, affecting versions through 1.74. This vulnerability allows authenticated remote attackers to manipulate specific parameters after acquiring a course ID, enabling them to obtain a course invitation code and join any course.

Impact

Exploitation of this vulnerability could lead to unauthorized access to courses by allowing attackers to join any course using the obtained invitation code.

Remediation

Users are advised to update Tronclass to version 1.77 or later.