CVE-2024-12307

Summary

CVE-2024-12307 is a function-level access control vulnerability affecting Unifiedtransform version 2.0 and possibly older versions. This issue permits teachers to modify student personal data unauthorizedly due to insufficient access control checks within the student editing functionality. At the time of this alert, a patch to remediate the vulnerability has yet to be released.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.