writeups.xyz / Cengage LTI Session Management Leakage

Submitter : c2a

Date: 20 December 2022

Bounty : undisclosed

Vulnerabilities :

• SSO
• Session Management Issue

Programs :

• Cengage

Authors :

• Tony Porterfield

Link :
https://www.rapid7.com/blog/post/2022/12/20/cengage-lti-session-management-leakage/