Polarnl Polarlearn vulnerabilities
- polarlearnPolarLearn: Any password authenticates banned accounts and grants API access9.2 Critical
- polarlearnPolarLearn has a Server Action Admin Bypass in Account Management Actions8.8 High
- polarlearnPolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chats10.0 Critical
- polarlearnPolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint6.3 Medium
- polarlearnPolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)2.3 Low
- polarlearnPolarLearn's unvalidated vote direction allows vote count manipulation7.1 High