(Institute of Electrical and Electronics Engineers (IEEE), 2023-03-21) San Cristóbal Ruiz, Elio; Pastor Vargas, Rafael; Gil Ortego, Rosario; Meier,Russ; Saliah-Hassane, Hamadou; Castro Gil, Manuel Alonso
This paper presents a vulnerability assessment of a class of web applications designed to serve educational coursework to online users. We describe the deployment landscape, the known vulnerabilities institutions must be aware of, and document how non-supervised deployment puts institutions at risk from cybercriminals.