CVE-2025-62778Frappe Learning allowed students to access the Quiz Form via direct URL

Beschreibung

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://github.com/frappe/lms/security/advisories/GHSA-8xvv-6v89-xxgx Vendor Advisory
• https://github.com/frappe/lms/commit/8749e21744547ae32f729bde05c854113e126750 Patch