Enumerate all the class codes via google dorking
High
K
Khan Academy
Submitted None
Actions:
Reported by
renganathan
Vulnerability Details
Technical details and impact analysis
I used this particular google dork `site:khanacademy.org/join/*` to enumerate all the links of joining classes.
1. Go to google and use the above query to enumerate all of them.
2. Create the student account by filling all the required details
3. Now you're in the class without being actually invited by the teacher
Attached POC:
████████
## Impact
An attacker can enumerate all the classes and join in them and make chaos there are chances of IDOR too... a class code can look like `a57d5d5548f302ef4a` instead of `A45JST`
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Improper Access Control - Generic