CVE-2025-64705

MEDIUM

4.3

Description

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed via direct URL.

Details CVE

Score CVSS v3.14.3

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie11/12/2025

Derniere modification11/17/2025

Sourcenvd

Observations honeypot0

Produits affectes

frappe:learning

Faiblesses (CWE)

CWE-200

References

https://github.com/frappe/lms/security/advisories/GHSA-qrvv-6g7r-g3v8(security-advisories@github.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.