Advisories · Technology
polarnl PolarLearn.
Every CVE that names polarnl PolarLearn among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
PolarLearn: Any password authenticates banned accounts and grants API access
- polarnl PolarLearn
- Authentication bypass
- CVSS 8.8 High
PolarLearn has a Server Action Admin Bypass in Account Management Actions
- polarnl PolarLearn
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
PolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chats
- polarnl PolarLearn
- Broken access control
- Authentication bypass
- CVSS 6.3 Medium
PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint
- polarnl PolarLearn
- Information disclosure
- CVSS 2.3 Low
PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)
- polarnl PolarLearn
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
PolarLearn's unvalidated vote direction allows vote count manipulation
- polarnl PolarLearn
- CWE-20