CVE-2025-62778Frappe Learning allowed students to access the Quiz Form via direct URL

Description

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/frappe/lms/security/advisories/GHSA-8xvv-6v89-xxgx Vendor Advisory
• https://github.com/frappe/lms/commit/8749e21744547ae32f729bde05c854113e126750 Patch