Summary

The giveReview function in LevelOne.sol lacks a check for the inSession status, allowing teachers to give reviews even when the school is not in session.

Vulnerability Details

• giveReview function doesn't verify if inSession is true

• Teachers can give reviews outside of active sessions

• No validation against the session period

• Reviews can be given before session start or after session end

Impact

Low: This vulnerability:

• Allows reviews outside of intended session periods

• Could lead to unfair student evaluations

• Breaks the intended session-based review system

• May cause confusion in student performance tracking

Tools Used

Manual code review

Recommendations

Add session status check to giveReview: