Post-Auth SQL Injection in Koollab LMS

Executive Summary

This is a post-authentication SQL injection vulnerability in Koollab LMS. An attacker with valid credentials can exploit an error-based SQL oracle through the face-to-face runs update endpoint to read the entire application database and steal valid JWT tokens for account takeover.

Useful 0 Not Useful 0

Impact Analysis

An attacker could access sensitive data stored in the database, such as user credentials or personal information. They could also hijack user accounts by obtaining valid JWT tokens, leading to unauthorized access and potential data breaches.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR's data protection principles and HIPAA's security requirements. It may result in non-compliance, legal penalties, and reputational damage due to data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security patches or updates for Koollab LMS immediately. Disable or restrict access to the face-to-face runs update endpoint until patched. Review database access logs for unusual queries or errors. Rotate all JWT tokens and credentials to prevent account takeover.

Useful 0 Not Useful 0