What is GHSA-qqq4-m483-fm7p?

GHSA-qqq4-m483-fm7p is a security advisory published by GitHub Security Advisories with Medium severity. A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their...

Which CVE IDs does GHSA-qqq4-m483-fm7p cover?

GHSA-qqq4-m483-fm7p covers the following CVE IDs: CVE-2026-63242. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qqq4-m483-fm7p?

GHSA-qqq4-m483-fm7p has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-qqq4-m483-fm7pMediumCVSS 4.3

A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their...

Vendor

GitHub Security Advisories

Published

July 29, 2026

Last Modified

July 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-63242 →

📋 Description

A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-63242
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094
https://github.com/advisories/GHSA-qqq4-m483-fm7p