TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2020-5743
Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote authenticated attacker to access test metadata for which they don39t have permission.