CVE-2021-43129

A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-04-19

Last modified

2024-08-04

Affected products

• Brightspace (D2l)

References

• https://community.brightspace.com/s/article/retirement-notice-disable-right-click
• https://github.com/Skotizo/CVE-2021-43129
• https://www.d2l.com/learning-management-system-lms/