https://sudonull.com/bac-vulnerability-in-electronic-diaries-become-a-teacher-without-permissions
Analysis of Critical Broken Access Control Vulnerability in School Electronic Diaries. How Changing Parameters Grants Access to Teacher Functions and Why Fixes Are Cosmetic.