CVE-2025-62778Frappe Learning allowed students to access the Quiz Form via direct URL

Descripción

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://github.com/frappe/lms/security/advisories/GHSA-8xvv-6v89-xxgx Vendor Advisory
• https://github.com/frappe/lms/commit/8749e21744547ae32f729bde05c854113e126750 Patch