Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 08:12:50 +0000 CVE-2026-114389 — Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade https://db.gcve.eu/vuln/cve-2026-114389 <p><strong>Affected:</strong> chamilo-lms</p> <p>Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any authenticated user to obtain AI grading of other students&#39; exam attempts. Attackers can enumerate exeId and questionId values sent to the open_answer_grade endpoint to expose other students&#39; answers through feedback and consume AI quota.</p> <p><strong>Affected:</strong> chamilo-lms</p> <p>Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any authenticated user to obtain AI grading of other students&#39; exam attempts. Attackers can enumerate exeId and questionId values sent to the open_answer_grade endpoint to expose other students&#39; answers through feedback and consume AI quota.</p> https://db.gcve.eu/vuln/cve-2026-114389